sgx 5150 iot device gateway command reference - … · sgx 5150 iot device gateway command...

Part Number 900-767-R

PremierWave® 2050SGX 5150 IoT Device Gateway

Command Reference

TM

Revision C January 2018

Intellectual Property

© 2018 Lantronix, Inc. All rights reserved. No part of the contents of this publication may be transmitted or reproduced in any form or by any means without the written permission of Lantronix.

Lantronix is a registered trademark of Lantronix, Inc. in the United States and other countries. DeviceInstaller is a trademarks of Lantronix, Inc.

Patented: http://patents.lantronix.com; additional patents pending.

Windows is a registered trademark of Microsoft Corporation. Wi-Fi is registered trademark of Wi-Fi Alliance Corporation. All other trademarks and trade names are the property of their respective holders.

Warranty

For details on the Lantronix warranty policy, please go to our web site at www.lantronix.com/support/warranty.

Contacts

Lantronix, Inc.7535 Irvine Center DriveSuite 100Irvine, CA 92618, USAToll Free: 800-526-8766Phone: 949-453-3990Fax: 949-453-3995

Technical Support Online: www.lantronix.com/support

Sales Offices

For a current list of our domestic and international sales offices, go to the Lantronix web site at www.lantronix.com/about/contact.

Disclaimer

All information contained herein is provided “AS IS.” Lantronix undertakes no obligation to update the information in this publication. Lantronix does not make, and specifically disclaims, all warranties of any kind (express, implied or otherwise) regarding title, non-infringement, fitness, quality, accuracy, completeness, usefulness, suitability or performance of the information provided herein. Lantronix shall have no liability whatsoever to any user for any damages, losses and causes of action (whether in contract or in tort or otherwise) in connection with the user’s access or usage of any of the information or content contained herein. The information and specifications contained in this document are subject to change without notice.

SGX 5150 IoT Device Gateway Command Reference 2TM

http://www.lantronix.com/legal/patents/

http://www.lantronix.com/support

http://www.lantronix.com/about/contact

http://patents.lantronix.com

http://www.lantronix.com/support/documentation.html

http://www.lantronix.com/support/documentation.html

Open Source Software

Some applications are Open Source software licensed under the Berkeley Software Distribution (BSD) license, the GNU General Public License (GPL) as published by the Free Software Foundation (FSF), and the Python Software Foundation (PSF) License Agreement for Python 2.7.6 (Python License). Lantronix grants you no right to receive source code to the Open Source software. Your use of each Open Source component or software is subject to the terms of the applicable license. The BSD license is available at http://opensource.org/licenses. The GNU General Public License is available at http://www.gnu.org/licenses/. The Python License is available at https://www.python.org/download/releases/2.7/license/.Your use of each Open Source component or software is subject to the terms of the applicable license.

wpa_supplicant: http://w1.fi/cgit/hostap/plain/wpa_supplicant/README

Openssl : http://openssl.org/source/license.html

Busybox: http://busybox.net/license.html

Dropbear: https://secure.ucc.asn.au/hg/dropbear/raw-file/tip/LICENSE

VSFTPD: https://security.appspot.com/vsftpd.html#about

Bootstrap: https://github.com/twbs/bootstrap/blob/master/LICENSE

Python: https://www.python.org/download/releases/2.7/license/

Linux kernel version 3.10.0. https://www.kernel.org/pub/linux/kernel/COPYING

OPEN SOURCE SOFTWARE IS DISTRIBUTED WITHOUT ANY WARRANTY, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SEE THE APPLICABLE LICENSE AGREEMENT FOR ADDITIONAL INFORMATION.

Revision History

Date Rev. Comments

October 2016 A Initial document with firmware revision 8.0.0.0.

November 2016 B Updated document to include firmware features of all models of the SGX 5150 IoT device gateway.

January 2018 C Updated document to firmware revision 8.1.0.1R17.


http://opensource.org/licenses

http://www.gnu.org/licenses/

https://www.python.org/download/releases/2.7/license/

http://w1.fi/cgit/hostap/plain/wpa_supplicant/README

http://openssl.org/source/license.html

http://busybox.net/license.html

https://secure.ucc.asn.au/hg/dropbear/raw-file/tip/LICENSE

https://security.appspot.com/vsftpd.html#about

https://github.com/twbs/bootstrap/blob/master/LICENSE

https://www.python.org/download/releases/2.7/license/


Table of Contents

Intellectual Property ________________________________________________________2

Warranty _________________________________________________________________2

Contacts _________________________________________________________________2

Disclaimer ________________________________________________________________2

Open Source Software ______________________________________________________3

Revision History ___________________________________________________________3

List of Figures _____________________________________________________________5

List of Tables ______________________________________________________________6

1: About This Guide 7Chapter Summaries ________________________________________________________7

Conventions ______________________________________________________________7

Additional Documentation ____________________________________________________8

2: Overview 9XML Architecture and Control _________________________________________________9

Command Line Interface _____________________________________________________9

3: Command Line Interface 10Configuration Using Telnet __________________________________________________10

Configuration Using the Serial Lines ___________________________________________10

Navigating the CLI Hierarchy ________________________________________________11

Using Keyboard Shortcuts and CLI ____________________________________________12

Understanding the CLI Level Hierarchy ________________________________________12

4: Configuration Using XML 15XML Configuration Record Document Type Definition _____________________________15

Quick Tour of XML Syntax __________________________________________________16

Record, Group, Item, and Value Tags _________________________________________17

Importing and Exporting an XML Configuration File _______________________________19

Best Practices ____________________________________________________________19

XML Configuration Groups __________________________________________________20

XML Status Record Groups and Items _________________________________________37

5: Commands and Levels 51


List of Figures

Figure 3-2 CLI Level Hierarchy ______________________________________________________13

Figure 3-3 Login Level Commands___________________________________________________14

Figure 3-4 Enable Level Commands__________________________________________________14

Figure 4-1 DTD for XCRs __________________________________________________________15

Figure 4-2 XML Example __________________________________________________________16

Figure 4-3 XML Example __________________________________________________________17

Figure 4-4 XML Example of Multiple Named Values _____________________________________17

Figure 4-5 XML Example of Multiple Items _____________________________________________18

Figure 4-6 XML Example with Multiple Groups__________________________________________18


List of Tables

Table 3-1 Keyboard Shortcuts _____________________________________________________ 12

Table 4-7 XCR Groups ___________________________________________________________ 20

Table 4-8 XSR Group and Items____________________________________________________ 37

Table 5-1 Commands and Levels ____________________________________________________59

1: About This Guide

This document describes how to configure the Lantronix® SGX 5150 IoT device gateway using the Command Line Interface (CLI) and/or Extensible Markup Language (XML). CLI provides an interactive mode for accessing the gateway configuration and management interface. It is most suited for system and network administrators comfortable with using similar interfaces on enterprise IT and networking products. It is also helpful as a quick tool for access via the product's serial ports or console/management ports. XML provides an extensible mode for software developers interfacing with the gateway and system integrators performing batch provisioning/updates.

Chapter Summaries

This table lists and summarizes the content of each chapter.

Conventions

The table below lists and describes the conventions used in this book.

Chapter Summary

2: Overview Gives an overview of CLI and XML.

3: Command Line Interface Lists commands and describes how to use CLI to configure the SGX 5150 IoT device gateway.

4: Configuration Using XML Lists XML Configuration Record (XCR) groups and items and describes how to use XCRs to configure the SGX 5150 IoT device gateway.

5: Commands and Levels Provides an index of the CLI command hierarchy with hyperlinks to the corresponding command details.

Convention Description

Bold text Default parameters

Italic text Required values for parameters.

Square Brackets [ ] Optional parameters.

Angle Brackets < > Possible values for parameters.

Pipe | Choice of parameters.

Warning Warning: Means that you are in a situation that could cause equipment damage or bodily injury. Before you work on any equipment, you must be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.

Note Note: Means take notice. Notes contain helpful suggestions, information, or references to material not covered in the publication.

Caution Caution: Means you might do something that could result in faulty equipment operation or loss of data.

Screen Font CLI terminal sessions and examples of CLI input are depicted in courier new font.

TM


1: About This Guide

Additional Documentation

Visit the Lantronix website at www.Lantronix.com/support/documentation for all latest Lantronix documentation which includes the latest versions of the SGX 5150 IoT device gateway-related documentation listed below.

Document Description

SGX 5150 IoT Device Gateway User Guide Describes how to configure and use the SGX 5150 IoT device gateway.

SGX 5150 IoT Device Gateway Product Brief

Provides key feature, SKU option, technical specifications, and order information about the SGX 5150 IoT device gateway.

Com Port Redirector Quick Start and Online Help

Instructions for using the Lantronix Windows® operating system (OS) -based utility to create virtual com ports.

DeviceInstaller Online Help Instructions for using the Lantronix Windows OS-based utility to locate and view the current settings of the SGX 5150 IoT device gateway.



2: Overview

The SGX 5150 IoT device gateway supports three convenient configuration methods: Web Manager, CLI, and XML. For more information about Web Manager, see the SGX 5150 IoT Device Gateway User Guide available at www.Lantronix.com/support/documentation.

XML Architecture and Control

XML is a fundamental building block for Machine-to-Machine (M2M) and Internet of Things (IoT) networks. The SGX 5150 IoT device gateway supports XML configuration records that make configuring the SGX 5150 unit easy for users and administrators. XML configuration records are easy to edit with a standard text editor or an XML editor.

For a brief overview of XML, see 4: Configuration Using XML. It provides guidelines for basic XML syntax, the specific XML tags used, and XML configuration records.

Command Line Interface

Making the edge-to-enterprise vision a reality, the SGX 5150 IoT device gateway uses industry-standard tools for configuration, communication, and control. For example, the SGX 5150 IoT device gateway uses a command line interface (CLI) whose syntax is very similar to that used by data center equipment such as routers and hubs.

For details of the CLI, see 5: Commands and Levels. It provides an index of the CLI Command Hierarchy with links to the corresponding command details. The CLI provides commands for configuring, monitoring, and controlling the SGX 5150 IoT device gateway.

3: Command Line Interface

This chapter describes accessing the SGX 5150 IoT device gateway by using Telnet, SSH, or serial ports to configure the gateway, navigating the CLI, typing keyboard shortcuts, and moving between the levels.

It contains the following sections:

Configuration Using Telnet

Configuration Using the Serial Lines

Navigating the CLI Hierarchy

Using Keyboard Shortcuts and CLI

Understanding the CLI Level Hierarchy

Refer to Chapter 5: Commands and Levels for a complete list of levels, commands, and descriptions.

Configuration Using Telnet

To access and configure the SGX 5150 IoT device gateway by using a Telnet session over the network, you must first establish a Telnet connection. You can also establish a Telnet connection by clicking the Telnet Configuration tab in the Lantronix® DeviceInstaller™ utility. See the DeviceInstaller Online Help for more information.

To access the SGX 5150 IoT device gateway by using Telnet, perform the following steps.

1. Click Start > Run. The Run dialog box displays.

2. Type cmd in the dialog box and press OK.

3. Type telnet x.x.x.x (x.x.x.x is the IP address) in a Windows/Linux command prompt.

4. The SGX 5150 IoT device gateway is online when the command prompt (>) displays. You are at the root level of the CLI.

Note: Depending on the level of security, a password may be required.

Configuration Using the Serial Lines

Serial Command ModeThe serial port can be configured to operate in command mode permanently or to be triggered under specified conditions. See the line <line> Level command description for more information.

Serial RecoverySerial Recovery mode will temporarily override line settings for the serial line to allow configuration changes to be made. Line settings will be restored once the user exits the Serial Recovery mode CLI.



To configure the SGX 5150 IoT device gateway locally using a serial port:

1. Connect a terminal or a PC running a terminal emulation program to one of the gateway's serial ports.

2. Configure the terminal to the following settings:

9600 baud

8-bit

No parity

1 stop bit

No flow control.

3. Power off the gateway.

4. Press and hold down the exclamation point (!) key.

5. Power on the gateway. After about 10 seconds, the exclamation point will display on the terminal or PC screen.

6. Type xyz within 5 seconds to display the CLI prompt.

Navigating the CLI Hierarchy

The CLI is organized into a hierarchy of levels. Each level has a group of commands for a specific purpose. For example, to configure a setting for the FTP server, one would navigate to the FTP level, which is under the configuration level.

To move to a different level—Enter the name of the level from within its parent level. For example, to enter the line level, type line <number> at the enable prompt. This displays: <enable> line <number>#.

To exit and return to one level higher—Type exit and press the Enter key. Typing exit at the login level or the enable level will close the CLI session.

To view the current configuration at any level—Type show.

To view the list of commands available at the current level—Type the question mark "?". Items within < > (e.g. <string>) are required parameters.

To view the available commands and explanations—Type the asterisk (*).

To view the list of commands available for a partial command—Type the partial command followed by the question mark "?". For example: <line 1>#show? displays a list of all show commands at the line level.

To view available commands and their explanations for a partial command—Type the partial command followed by the asterisk (*). For example: <line 1>#show* displays a list of all show commands and descriptions at the line level.

To view the last 20 commands entered at the CLI—Type show history.



Using Keyboard Shortcuts and CLI

One useful shortcut built into the SGX 5150 IoT device gateway is that the complete text of a command does not have to be entered to issue a command. Typing just enough characters to uniquely identify a command, then hitting enter, can be used as a short cut for a command. For example, at the enable level, "sh" can be used for the "show" command.

Tab Completion is also available using the Tab and Enter keys on the keyboard. Typing the first few characters of a command, then hitting the Tab key displays the first command that begins with those characters. Hitting the Tab key again displays the next command that begins with the original characters typed. You can press Enter to execute the command or you can backspace to edit any parameters.

The following key combinations are allowed when configuring the gateway using the CLI:

Table 3-1 Keyboard Shortcuts

Understanding the CLI Level Hierarchy

The CLI hierarchy is a series of levels. Arranging commands in a hierarchy of levels provides a way to organize and group similar commands, provide different levels of security, and reduce the complexity and number commands and options presented to a user at one time.

When you start a command line session, you begin at the login level. This level can be password protected and provides access to high level status, a few diagnostic commands, and the enable level. Further gateway information and configuration are accessed via the enable level.

The enable level can also be password protected and is the gateway to full configuration and management of the intelligent gateway. There are commands for gathering and effecting all elements of gateway status and configuration, as well as commands that take you to additional levels. For instance, network specific status and configuration commands are found under the "configuration" level.

Key Combination Description

Ctrl + a Places cursor at the beginning of a line

Ctrl + b Backspaces one character

Ctrl + d Deletes one character

Ctrl + e Places cursor at the end of the line

Ctrl + f Moves cursor forward one character

Ctrl + k Deletes from the current position to the end of the line

Ctrl + l Redraws the command line

Ctrl + n Displays the next line in the history

Ctrl + p Displays the previous line in the history

Ctrl + u Deletes entire line and places cursor at start of prompt

Ctrl + w Deletes one word back

Ctrl + z Exits the current CLI level

Esc + b Moves cursor back one word

Esc + f Moves cursor forward one word



An overview of the levels in the SGX 5150 IoT device gateway is presented in Figure 3-2 CLI Level Hierarchy.

Figure 3-2 CLI Level Hierarchy

(login) enable

syslog

terminal network

line <number>

configure

device

terminal 1

ssl

bridge 1

access point

clock

diagnostics

http

ip

terminal 3

vpn 1

user management

xml

credentials

trusted authorities

icmp

cli

arp

discovery

If 2

ftp

If 1

dns

email <number>

filesystem

ssh

tunnel <number>

usb 1

action

applications

gateway

gre

host <number>

If 3

modbus

smtp

snmp

terminal 2

wlan profiles

reboot schedule

mass storage

client

server

disconnect

modem

accept

connect

packing

serial

mach10

rss



Commands at the login level (see Figure 3-3 Login Level Commands below) do not affect current configuration settings and are not displayed initially. If you type ?, you will see the login subcommands. These commands provide diagnostic and status information only.

Figure 3-3 Login Level Commands

admin@SGX5150-0080a3b028b6>?clrscrn exitiperf <params> ping <host>ping <host> <count> ping <host> <count> <timeout>ping6 <host> ping6 <host> <count>ping6 <host> <count> <timeout> showshow history show multicast routesshow routes show rulestcpdump <parameters> trace route <host>trace route <host> <protocol> enable

admin@SGX5150-0080a3b028b6>

Note: To configure the SGX 5150 IoT device gateway, you must be in the enable level and any of its sub-levels. Figure 3-4 Enable Level Commands below shows the enable level commands.

Figure 3-4 Enable Level Commands

admin@SGX5150-0080a3b028b6(enable)#admin@SGX5150-0080a3b028b6(enable)#?auto show interfaces auto show processesclrscrn configureconnect connect line <line>device disabledns email <number>exit filesystemiperf <params> kill ssh <session>kill telnet <session> line <line>ping <host> ping <host> <count>ping <host> <count> <timeout> ping6 <host>ping6 <host> <count> ping6 <host> <count> <timeout>reload reload factory defaultsshow show historyshow interfaces show ip socketsshow multicast routes show processesshow routes show rulesshow sessions sshssh <optClientUsername> <host> ssh <optClientUsername> <host> <possl tcpdump <parameters>telnet <host> telnet <host> <port>trace route <host> trace route <host> <protocol>tunnel <line> usb <line>write xml

admin@SGX5150-0080a3b028b6(enable)#

See the Chapter 5: Commands and Levels at the end of this document for a complete list of levels, commands, and descriptions.


4: Configuration Using XML

The SGX 5150 IoT device gateway provides an XML interface that you can use to configure SGX 5150 IoT device gateways. Every configuration setting that can be issued from the gateway’s Web Manager interface and CLI can be specified using XML.

The SGX 5150 IoT device gateway can import and export configuration settings as an XML document known as an XML Configuration Record (XCR). An XCR can be imported or exported via the CLI, a Web browser, or FTP. An XCR can contain many configuration settings or just a few. For example, it might change all of the configurable parameters for a SGX 5150 IoT device gateway, or it may only change the baud rate for a single serial line. Using XCRs is a straightforward and flexible way to manage the configuration of multiple SGX 5150 IoT device gateways.

XML Configuration Record Document Type Definition

An XML document type definition (DTD) is a description of the structure and content of an XML document. It verifies that a document is valid. XCRs are exported using the DTD as shown in Figure 4-1 DTD for XCRs.

Figure 4-1 DTD for XCRs

<!DOCTYPE configrecord [<!ELEMENT configrecord (configgroup+)><!ELEMENT configgroup (configitem+,configgroup*)><!ELEMENT configitem (value+)><!ELEMENT value (#PCDATA)><!ATTLIST configrecord version CDATA #IMPLIED><!ATTLIST configgroup name CDATA #IMPLIED><!ATTLIST configgroup instance CDATA #IMPLIED><!ATTLIST configitem name CDATA #IMPLIED><!ATTLIST value name CDATA #IMPLIED>]>

The SGX 5150 DTD rules state the following:

The XML document element is a <configrecord> element. This is the root element.

A <configrecord> must have one or more <configgroup> elements and can have a version attribute.

A <configgroup> must have one or more <configitem> elements and can have name and instance attributes.

A <configitem> element must have one or more <value> elements and can have a name attribute.

A <value> element can have only data and can have a name attribute.

The name attribute identifies a group, item, or value. It is always a quoted string.

The instance attribute identifies the specific option, like the serial port number. The "instance" attribute is always a quoted string.



Notes:

The name for each <configgroup> (specified with the name attribute) is the group name listed in the Web Manager XCR groups or with the "xcr list" CLI command. See the SGX 5150 IoT Device Gateway User Guide (available at www.Lantronix.com/support/documentation) for more information about the XCR groups.

An empty or missing <value> element in each present <configgroup> clears the setting to its default.

Quick Tour of XML Syntax

DeclarationThe first line, <?xml version="1.0" standalone="yes"?>, is called the XML declaration. It is required and indicates the XML version in use (normally version 1.0). The remainder of the file consists of nested XML elements, some of which have attributes and content.

Element Start and End TagsAn element typically consists of two tags: start tag and an end tag that surrounds text and other elements (element content). The start tag consists of a name surrounded by angle brackets, for example <configrecord>. The end tag consists of the same name surrounded by angle brackets, but with a forward slash preceding the name, for example </configrecord>. The element content can also contain other "child" elements.

Element AttributesThe XML element attributes that are name-value pairs included in the start tag after the element name. The values must always be quoted, using single or double quotes. Each attribute name should appear only once in an element.

Figure 4-2 XML Example shows an XML example which consists of a declaration (first line), nested elements with attributes and content.

Figure 4-2 XML Example

<configrecord version=”0.1.0.0T0”><configgroup name = “diagnostics”>

<configitem name = “log”><value name=”output”>Disable</value>

</configitem></configgroup>

</configrecord>

The SGX 5150 IoT device gateway uses the attributes in the following subsections to label the group configuration settings.



Record, Group, Item, and Value Tags

A <configgroup> is a logical grouping of configuration parameters and must contain one or more <configitem> elements. It must have a name attribute and may have an instance attribute.

A <configitem> is a specific grouping of configuration parameters relevant to its parent group. An item takes the name attribute and must contain one or more value elements. For example, the line group might have parameters such as baud rate, data bits, and parity.

A value may specify the value of a configuration parameter. It may contain the name attribute. In this example, a value of 9600 might be specified for baud rate; 7 may be specified for data bits, and even may be specified for parity.

A name attribute identifies the group, item, or value. It is always quoted (as are all XML attributes). For example, a group that contains serial port parameters has the name "line".

An instance attribute identifies which of several instances is being addressed. It is always quoted. For example, the serial port name (in the line configgroup) has the instance "1" to indicate serial port 1 or "2" to specify serial port 2..

The following figures show examples of XML configuration records and the use of the <configrecord>, <configgroup>, <configitem>, and <value> XML elements.

Figure 4-3 XML Example

<configrecord version=”0.1.0.0T0”><configgroup name = “diagnostics”>

<configitem name = “log”><value name=”output”>Disable</value>


</configrecord>

Figure 4-4 XML Example of Multiple Named Values

<configrecord version="0.1.0.0T0"><configgroup name=“xml import control">

<configitem name=“restore factory configuration"><value>disable</value>

</configitem><configitem name=“delete http authentication uris">

<value>disable</value></configitem><configitem name=“http authentication uri delete">

<value name=“name"/></configitem><configitem name=“reboot">

<value>disable</value></configitem>

</configgroup>



Figure 4-5 XML Example of Multiple Items

<configrecord version="0.1.0.0T0"><configgroup name="device">

<configitem name="short name"><value>sgx5150</value>

</configitem><configitem name="long name">

<value>Lantronix SGX5150</value></configitem><configitem name="serial number">

<value>0080A3946149</value></configitem></configitem><configitem name="firmware version">

<value>8.1.0.1R16</value></configitem><configitem name="lantronix iot gateway os version">

<value>1.0</value></configitem>

</configgroup>

Figure 4-6 XML Example with Multiple Groups

<configrecord version="0.1.0.0T0"><configgroup name="diagnostics">

<configitem name="log"><value name="output">Disable</value>

</configitem></configgroup><configgroup name=“discovery">

<configitem name=“state"><value>enable</value>

</configitem><configitem name=“upnp state">

<value>enable</value></configitem><configitem name=“upnp port">

<value>30179</value></configitem>

</configgroup><configgroup name=“ethernet" instance="eth0">

<configitem name=“speed"><value>Auto</value>

</configitem><configitem name=“duplex">

<value>Auto</value></configitem>

</configgroup><configgroup name=“ftp server">

<configitem name=“state"><value>enable</value>




Importing and Exporting an XML Configuration File

An XCR can be imported or exported using the following methods:

CLIXCRs can be imported (captured) or exported (dumped) directly to a Telnet, SSH, or serial line CLI session. Capturing an XCR can be started by pasting a valid XCR directly into the CLI prompt. The SGX 5150 IoT device gateway immediately processes the configuration record, changing any settings specified. This can be done on any level, including the root. Special tags in the XML allow for providing root and enable level passwords so that this can also be done at the password prompt.

Web BrowserWeb Manager can be used to import and export an XCR from an external source such as your local hard drive.

FTPThe SGX 5150 IoT device gateway FTP server can export and import XCRs when an FTP get or put command on the filename (sgx5150.xcr for export, sgx5150_import.xcr for import; both are under the pwxcr directory) is requested. On export (FTP get of sgx5150.xcr), the FTP server obtains the current XCR from the SGX 5150 IoT device gateway and sends it as a file. On import (FTP put of sgx5150_import.xcr), the FTP server processes the file by sending it directly to the XML engine. In both cases the SGX 5150 file system is not accessed. The files sgx5150.xcr and sgx5150_import.xcr are not read from or written to the file system. See the FTP section in the SGX 5150 IoT Device Gateway User Guide (available at www.Lantronix.com/support/documentation.)

Best Practices

You can import or export an entire XCR, or just a portion of it, by specifying the group name and/or group instances. In the examples below, import and export operations are performed from the Web. See Importing and Exporting an XML Configuration File above to import and export using Web Manager, the CLI or FTP.

Caution: Using Microsoft Word to edit and save an XCR will change the format of the file and make it incompatible with the SGX 5150 IoT device gateway. This is true even if the file is saved as Plain Text (.txt) or an XML Document (.xml). Notepad, a third party text editor, or a specialized XML editor should be used instead.

ExportingUsing the Web Manager interface, select from "Lines to Export" and "Groups to Export" filters and select from either "Export to Browser" or "Download (from link)" option. Save the output to your local file system.

ImportingModify the exported file by removing "configgroup" records and filling in any required secret data such as passwords, and private keys. Using the Web Manager, import the updated clone by uploading it from your local file system.



XML Configuration Groups

Table 4-7 lists the supported SGX 5150 XML configuration record (XCR) groups, items, and possible value names and options in alphabetical order.

Note: Any instance of &#60 in the table may be read as "less than" and any instance of &#62 may be read as "greater than".

Table 4-7 XCR Groups

Group Name Group Item Value Name Value Options Additional Info

access point state enable, disable

multicast forwarding

channel selection

channel

ip address

network name

suite

passphrase

dns redirect

action

attribute of an “instance” is “eth0 link state change”, “on scheduled reboot”, "usb0 link state change”, "wlan0 link state change"

delay

email alarm email

alarm message

alarm reminder interval

normal email

normal message

normal reminder interval

ftp put reminder interval

mode

connection 1 host

connection 1 port

connection 1 filename

connection 1 protocol

connection 1 username

connection 1 password

connection 1 local port

connection 2 host



action

attribute of an “instance” is “eth0 link state change”, “on scheduled reboot”, "usb0 link state change”, "wlan0 link state change"

(continued)

ftp put

(continued)

connection 2 port

connection 2 filename





http post reminder interval

mode

connection 1 host

connection 1 port

connection 1 url





connection 2 host

connection 2 port

connection 2 url





snmp trap state

reminder interval

alarm message

normal message




applications reserved start port

reserved port

python

(Attribute of an instance is a number.)

state

filename

parameters

output

onstart

onshutdown

arp arp delete ip address

arp entry ip address

mac address

bridge

(“Instance” attribute is “br0”)

state enable, disable

transparent mode

network access for gateway

bridging mac address

bridging ip address <control&#62

auto detect ip address

bridging ipv6 address

<control&#62

bridging initial scan interval

bridging scan interval

ethernet interface

cli enable level password

quit connect line <control&#62

inactivity timeout

line authentication enable, disable

clock time and zone time zone zone

offset

time set hours

minutes

seconds

day of month

month

year




clock synchronization method

manual, SNTP

ntp server (0.pool.ntp.org)

device short name

long name

serial number

firmware version

configuration version

lantronix iot gateway os version

dhcp server state

ipv6 state

start ip address

start ipv6 address

end ip address

end ipv6 address

lease time

static leases


mac address

ip address

ipv6 address

diagnostics log output

max length

discovery state enable, disable

upnp state enable, disable

upnp port

email


to

cc

reply to

subject

message file

priority

ethernet

(“Instance” attribute is “eth0”)

speed

duplex

filesystem mass storage usb auto mount




ftp server state enable, disable

port

data port

passive mode start port

<Random>

passive mode ports <Random>

gateway wan operating mode

firewall

mac address filter

wan interface

router ip address

router ipv6 address

primary dns

secondary dns

port forwarding


state

friendly name

port or range

target port

protocol

ingress ip address

ip address

static routes


state

network

gateway

metric

interface

friendly name

gre name


ip address

mtu

local network

remote host

remote network

host


name

protocol

ssh username

remote address

remote port




http authentication uri

user delete name

realm

type digest

user

(Attribute of an instance is “admin”.)

password

http server state enable, disable

port

https state enable, disable

secure port

secure protocols TLS1.0, TLS1.1, TLS1.2

secure credentials

max timeout

max bytes

logging state enable, disable

max log entries

log format

authentication timeout

icmp state enable, disable

input filters


mac filter

(attribute of an instance is a number)

mac address

action




interface

(“Instance” attributes are “eth0”, “usb0”, and “wlan0”)


ipv4 state enable, disable

dhcp disable, enable

priority

ip address <None>

default gateway <None>

ipv6 state enable, disable

ipv6 dhcp enable, disable

ipv6 auto configure enable, disable

ipv6 address <None>

ipv6 default gateway

<None>

ipv6 domain

ipv6 primary dns <None>

ipv6 secondary dns <None>

hostname

domain

dhcp client id

primary dns <None>

secondary dns <None>

mtu

ip ip time to live

multicast time to live

line (Attribute of an instance is a number.)

name


protocol

baud rate

parity

data bits

stop bits

flow control

xon char <None>

xoff char <None>

gap timer <None>

threshold




mach10 line(Attribute of an instance is a number.)

state

project tag

command delimiter

status update interval

content check interval

local port <None>

mach10 state

host

port

secure port

validate certificates

local port <None>

mqtt state

mqtt host

mqtt port

mqtt security

mqtt local port

device id

device key

device name

device description

status update interval

content check interval

apply firmware updates

apply configuration updates

reboot after update

modbus tcp server state enable, disable

additional port <None>

response timeout

rss trace input enable, disable




network failover

(Attribute of an instance is “eth0”, “usb0”, and “wlan0”.)


hostname

method

timeout

interval

failover threshold

failback threshold

failover interface

qos

(Attribute of an instance is “eth0”, “usb0”, and “wlan0”.)


import filters enable, disable

uplink data speed

filter


mac address

network

ports

priority

reboot schedule state enable, disable

schedule

hours

minutes

interval

unit

routing protocols rip state

version

update interval

timeout interval

gc interval

ospf state

hello interval

dead interval

rss feed

persist

max entries

serial command mode (Attribute of an instance is a number.)

mode enable, disable

echo serial string enable, disable

serial string

signon message

wait time




smtp from address

server address

server port

username

password

overriding domain

local port <None>

snmp snmpd state

port

version

read community

write community

username

security

authentication protocol

authentication password

privacy protocol

privacy password

system contact

system name

system description

system location

traps community

primary destination port

primary destination

secondary destination

secondary destination port

version

username

security

authentication protocol

authentication password

privacy protocol

privacy password




ssh client delete known hosts enable, disable

known host delete name

known host public rsa key

public dsa key

delete client users enable, disable

client user delete name

client user password

remote command

public rsa key

private rsa key

public dsa key

private dsa key

ssh server host rsa keys public key

private key

host dsa keys public key

private key

delete authorized users

enable, disable

authorized user delete

name

authorized user password

public rsa key

public dsa key

ssh state enable, disable

port

max sessions




ssl credentials rsa certificate

rsa certificate type

rsa pfx password

rsa private key

rsa private key type

rsa private key pfx password

dsa certificate

dsa certificate type

dsa pfx password

dsa private key

dsa private key type

dsa private key pfx password

credential type

trusted authority certificate

certificate type

pfx password

intermediate authority

certificate

certificate type

pfx password

delete all credentials

enable, disable

delete all cas enable, disable

syslog state enable, disable

host

remote port

local port <None>

severity log level

telnet state enable, disable

port

max sessions

authentication enable, disable

terminal (“Instance” attribute is a number or “network”)

terminal type

login connect menu enable, disable

exit connect menu enable, disable

send break <None>

break duration

echo enable, disable




tunnel accept


accept mode

local port

protocol

credentials

tcp keep alive

tcp keep alive interval

tcp keep alive probes

aes encrypt key

aes decrypt key

initial send

start character <None>

flush start character enable, disable

flush serial enable, disable

block serial enable, disable

block network enable, disable

password password

prompt

email connect <None>

email disconnect <None>




tunnel connect


connect mode enable, disable

start character <control>B

flush start character enable, disable

local port <Random>

host


address

port

protocol

ssh username

credentials

validate certificate

tcp user timeout

tcp keep alive

tcp keep alive interval

tcp keep alive probes

aes encrypt key

aes decrypt key

initial send

host mode

reconnect time

flush serial

block serial

block network

email connect

email disconnect

tunnel disconnect


stop character <None>

flush stop character enable, disable

modem control enable, disable

timeout

flush serial enable, disable




tunnel modem


echo pluses enable, disable

echo commands enable, disable

verbose response enable disable

response type

error unknown commands

enabled, disabled

incoming connection

connect string

display remote ip enable, disable

tunnel packing


packing mode enable, disable

timeout

threshold

send character <Control>

trailing character <None>

tunnel serial


dtr <None>

usb line


name

interface


protocol

gap timer <None>

threshold

line mode

user management admin username

admin password

user

(Attribute of an instance is a number)

username

password

role

roles

(Attribute of an instance is a number)

name

write

execute

virtual ip



name

ip address

lan ip address




vpn


connection name


connection type

ikev2

authentication mode

remote peer type

mode configuration enable, disable

type

interface

remote endpoint

remote subnet

remote id

remote next hop

local subnet

local id

local next hop

perfect forward secrecy

enable, disable

psk

local key length

remote rsa key

remote key

username

password

aggressive mode enable, disable

nat traversal enable, disable

ike encryption

ike authentication

ike dh group

ike life time

esp encryption

esp authentication

esp dh group

sa life time

unreachable host detection

host

ping interval

max tries




wlan profile profile type

interface

priority

bssid

basic network name


advanced tx power maximum

power management

security suite

key type

passphrase

wep authentication

wep key size

wep tx key index

wep key 1

wep key 2

wep key 3

wep key 4

wpax authentication

wpax pmf disabled, optional, required

wpax key

wpax ieee 802.1x

wpax eap-ttls option

wpax peap option

wpax fast option

wpax fast provisioning

wpax username

wpax password

wpax validate certificate

wpax credentials

wpax inner credentials




XML Status Record Groups and Items

Table 4-8 lists the supported SGX 5150 XML status record (XSR) groups and items. These groups and items show the status of the gateway in XML form and can only be exported. The XSR schema differs slightly from the XCR groups and items in that the XSR allows groups within groups.

Table 4-8 XSR Group and Items

wlan

(“Instance” attribute is “wlan0”)

choice


antenna diversity enabled, antenna 1, antenna 2

debugging level

wifi direct go mode enable, disable

band Auto, 2.4 GHz Only, 5 GHz Only

scanning latency

scanning channel list

xml import control restore factory configuration

enable, disable

delete http authentication uris

enable, disable

http authentication uri delete

name

reboot enable, disable

Group Name Item Name Value Name Valid Values

access point

action

(Attribute of an instance includes, “eth0 link state change, “on scheduled reboot”, “usb0 link state change”, and “wlan0 link state change”.)

alarm state on, off

duration

transitions

arp arp entry ip address

mac address

type

interface




bridge

(“Instance” attribute is “br0”)

enable state enable, disable

active state active, inactive

clock time

date

timezone zone

offset

device product info product type

serial number

firmware version

configuration version

build date year

build date month

build date day

build date hour

build date minute

build date second

lantronix iot gateway os version

uptime

permanent config

region

email log


entry time

log

email


success sent

sent with retries

failed

queued

failover

(Attribute of an instance includes “eth0”, “usb0”, and “wlan0”)

state

transitions




hardware cpu type

speed

memory flash size

ram size

connections number serial

number usb

number ethernet

number wireless

number cellular

http log totals entries

bytes

entry (Attribute of an instance is a number.)

http state enable, disable

logging entries

bytes




icmp snmp InMsgs

InErrors

InCsumErrors

InDestUnreachs

InTimeExcds

InParmProbs

InSrcQuenchs

InRedirects

InEchos

InEchoReps

InTimestamps

InTimestampReps

InAddrMasks

InAddrMaskReps

OutMsgs

OutErrors

OutDestUnreachs

OutTimeExcds

OutParmProbs

OutSrcQuenchs

OutRedirects

OutEchos

OutEchoReps

OutTimestamps

OutTimestampReps

OutAddrMasks

OutAddrMaskReps




interface(Attribute of an instance is “eth0”, “usb0”, or “wlan0”.)

generic status

mac address

ip address

network mask

default gateway

ipv4 domain

ipv4 address type

ipv6 link local address

ipv6 global address

ipv6 global address



receive bytes

packets

errs

drop

fifo

frame

compressed

multicast

transmit bytes

packets

errs

drop

fifo

colls

carrier

compressed

ip sockets ip socket protocol

rx queue

tx queue

local address

local port

remote address

remote port

state




ip snmp Forwarding

DefaultTTL

InReceives

InHdrErrors

InAddrErrors

ForwDatagrams

InUnknownProtos

InDiscards

InDelivers

OutRequests

OutDiscards

OutNoRoutes

ReasmTimeout

ReasmReqds

ReasmOKs

ReasmFails

FragOKs

FragFails

FragCreate

netstat InNoRoutes

InTruncatedPkts

InMcastPkts

OutMcastPkts

InBcastPkts

OutBcastPkts

InOctets

OutOctets

InMcastOctets

OutMcastOctets

InBcastOctets

OutBcastOctets

InCsumErrors




line(Attribute of an instance is a number.)

receiver bytes

breaks

parity errors

framing errors

overrun errors

no receive buffer errors

queued bytes

flow control

transmitter bytes

breaks

queued bytes

flow control

line levels cts input

rts output

dsr input

dtr output <control>

line state enable, disable

protocol

baud rate

parity

data bits

stop bits

flow control

xon char <control>Q

xoff char <control>Q

mach10 status

memory main heap total memory

available memory

modbus local slave totals pdus in

pdus out

exceptions




modbus tcp server

(Attribute of an instance includes, “additional” and “permanent”.)

state

local port

totals uptime

pdus in

pdus out

connections

last connection local ip address

local port

remote ip address

remote port

network dns primary

secondary

processes process(Attribute of an instance is a number.)

stack used

stack size

cpu %

thread name

qos

(Attribute of an instance includes: “eth0”, “usb0”, and “wlan0”.)

query port status enabled, disabled

last connection ip address

port

in discoveries

unknown queries

erroneous packets

out discovery replies

errors

rss url

data entries

bytes

sessions




tcp snmp RtoAlgorithm

RtoMin

RtoMax

MaxConn

ActiveOpens

PassiveOpens

AttemptFails

EstabResets

CurrEstab

InSegs

OutSegs

RetransSegs

InErrs

OutRsts

InCsumErrors




tcp (continued) netstat SyncookiesSent

SyncookiesRecv

SyncookiesFailed

EmbryonicRsts

PruneCalled

RcvPruned

OfoPruned

OutOfWindowIcmps

LockDroppedIcmps

ArpFilter

TW

TWRecycled

TWKilled

PAWSPassive

PAWSActive

PAWSEstab

DelayedACKs

DelayedACKLocked

DelayedACKLost

ListenOverflows

ListenDrops

TCPPrequeued

TCPDirectCopyFromBacklog

TCPDirectCopyFromPrequeue

TCPPrequeueDropped

TCPHPHits

TCPHPHitsToUser




tcp (continued) netstat (continued) TCPPureAcks

TCPHPAcks

TCPRenoRecovery

TCPSackRecovery

TCPSACKReneging

TCPFACKReorder

TCPSACKReorder

TCPRenoReorder

TCPTSReorder

TCPFullUndo

TCPPartialUndo

TCPDSACKUndo

TCPLossUndo

TCPLostRetransmit

TCPRenoFailures

TCPSackFailures

TCPLossFailures

TCPFastRetrans

TCPForwardRetrans

TCPSlowStartRetrans

TCPTimeouts

TCPLossProbes

TCPLossProbeRecovery

TCPRenoRecoveryFail

TCPSackRecoveryFail

TCPSchedulerFailed

TCPRcvCollapsed

TCPDSACKOldSent

TCPDSACKOfoSent

TCPDSACKRecv

TCPDSACKOfoRecv

TCPAbortOnData

TCPAbortOnClose

TCPAbortOnMemory

TCPAbortOnTimeout

TCPAbortOnLinger

TCPAbortFailed

TCPMemoryPressures

TCPSACKDiscard




tcp (continued) netstat (continued) TCPDSACKIgnoredOld

TCPDSACKIgnoredNoUndo

TCPSpuriousRTOs

TCPMD5NotFound

TCPMD5Unexpected

TCPSackShifted

TCPSackMerged

TCPSackShiftFallback

TCPBacklogDrop

TCPMinTTLDrop

TCPDeferAcceptDrop

IPReversePathFilter

TCPTimeWaitOverflow

TCPReqQFullDoCookies

TCPReqQFullDrop

TCPRetransFail

TCPRcvCoalesce

TCPOFOQueue

TCPOFODrop

TCPOFOMerge

TCPChallengeACK

TCPSYNChallenge

TCPFastOpenActive

TCPFastOpenPassive

TCPFastOpenPassiveFail

TCPFastOpenListenOverflow

TCPFastOpenCookieReqd

TCPSpuriousRtxHostQueues

tunnel modem echo commands enable, disable

verbose response enable, disable

response type

error unknown commands

enable, disable

incoming connection enabled, disabled




tunnel


aggregate completed connects

completed accepts

disconnects

dropped connects

dropped accepts

octets from device

octets from network

connect 0 connection time
















accept connection time

connect dns address changes

connect dns address invalids

udp snmp InDatagrams

NoPorts

InErrors

OutDatagrams

RcvbufErrors

SndbufErrors

InCsumErrors

usb line state enable, disable

protocol

vpn status

ipv4 address

interface




wlan scan network name bssid

channel

rssi

topology

wlan status state

bssid

rssi

frequency

channel

network name

profile

pairwise cipher

group cipher

key management

radio firmware version

xsr out bytes

lines

elements

errors



5: Commands and Levels

SGX™ 5150 IoT Device Gateway Command Reference 51

5: Commands and Levels Click the level in the tree structure and it will take you to the command list for that level.

root

• enable (enable) • configure (config)

• access point (config-access-point) • action (config-action-select)

• eth0 link state change (config-action:eth0 link state change) • email (config-action-email:eth0 link state change) • ftp put (config-action-ftp_put:eth0 link state change)

• connection 1 (config-action-ftp_put-connection:eth0 link state change:1)

• connection 2 (config-action-ftp_put-connection:eth0 link state change:2)

• http post (config-action-http_post:eth0 link state change) • connection 1 (config-action-http_post-

connection:eth0 link state change:1) • connection 2 (config-action-http_post-

connection:eth0 link state change:2) • snmp trap (config-action-snmp_trap:eth0 link state

change) • on scheduled reboot (config-action:on scheduled reboot)

• email (config-action-email:on scheduled reboot) • ftp put (config-action-ftp_put:on scheduled reboot)

• connection 1 (config-action-ftp_put-connection:on scheduled reboot:1)

• connection 2 (config-action-ftp_put-connection:on scheduled reboot:2)

• http post (config-action-http_post:on scheduled reboot) • connection 1 (config-action-http_post-

connection:on scheduled reboot:1) • connection 2 (config-action-http_post-

connection:on scheduled reboot:2) • snmp trap (config-action-snmp_trap:on scheduled re-

boot) • usb0 link state change (config-action:usb0 link state change)

• email (config-action-email:usb0 link state change) • ftp put (config-action-ftp_put:usb0 link state change)

• connection 1 (config-action-ftp_put-connection:usb0 link state change:1)

• connection 2 (config-action-ftp_put-connection:usb0 link state change:2)

• http post (config-action-http_post:usb0 link state change) • connection 1 (config-action-http_post-

connection:usb0 link state change:1)



• connection 2 (config-action-http_post-connection:usb0 link state change:2)

• snmp trap (config-action-snmp_trap:usb0 link state change)

• wlan0 link state change (config-action:wlan0 link state change) • email (config-action-email:wlan0 link state change) • ftp put (config-action-ftp_put:wlan0 link state change)

• connection 1 (config-action-ftp_put-connection:wlan0 link state change:1)

• connection 2 (config-action-ftp_put-connection:wlan0 link state change:2)

• http post (config-action-http_post:wlan0 link state change)

• connection 1 (config-action-http_post-connection:wlan0 link state change:1)

• connection 2 (config-action-http_post-connection:wlan0 link state change:2)

• snmp trap (config-action-snmp_trap:wlan0 link state change)

• applications (config-applications) • python 1 (config-applications-python:1) • python 2 (config-applications-python:2) • python 3 (config-applications-python:3) • python 4 (config-applications-python:4)

• arp (config-arp) • bridge 1 (config-bridge:br0) • cli (config-cli)

• ssh (config-cli-ssh) • telnet (config-cli-telnet)

• clock (config-clock) • ntp (config-clock-ntp)

• diagnostics (config-diagnostics) • log (config-diagnostics-log)

• discovery (config-discovery) • ftp (config-ftp) • gateway (config-gateway)

• dhcpserver (config-dhcpd) • static leases 1 (config-dhcpd-static_leases:1) • static leases 2 (config-dhcpd-static_leases:2) • static leases 3 (config-dhcpd-static_leases:3) • static leases 4 (config-dhcpd-static_leases:4) • static leases 5 (config-dhcpd-static_leases:5) • static leases 6 (config-dhcpd-static_leases:6) • static leases 7 (config-dhcpd-static_leases:7) • static leases 8 (config-dhcpd-static_leases:8)

• mac address filter 1 (config-mac_filter:1) • mac address filter 2 (config-mac_filter:2) • mac address filter 3 (config-mac_filter:3) • mac address filter 4 (config-mac_filter:4) • mac address filter 5 (config-mac_filter:5) • mac address filter 6 (config-mac_filter:6) • mac address filter 7 (config-mac_filter:7) • mac address filter 8 (config-mac_filter:8)



• port forwarding rule 1 (config-portforwarding:1) • port forwarding rule 2 (config-portforwarding:2) • port forwarding rule 3 (config-portforwarding:3) • port forwarding rule 4 (config-portforwarding:4) • port forwarding rule 5 (config-portforwarding:5) • port forwarding rule 6 (config-portforwarding:6) • port forwarding rule 7 (config-portforwarding:7) • port forwarding rule 8 (config-portforwarding:8) • static route 1 (config-staticroute:1) • static route 2 (config-staticroute:2) • static route 3 (config-staticroute:3) • static route 4 (config-staticroute:4) • static route 5 (config-staticroute:5) • static route 6 (config-staticroute:6) • static route 7 (config-staticroute:7) • static route 8 (config-staticroute:8) • virtual ip 1 (config-virtual-interface:1) • virtual ip 2 (config-virtual-interface:2) • virtual ip 3 (config-virtual-interface:3)

• gre 1 (config-gre:1) • host 1 (config-host:1) • host 2 (config-host:2) • host 3 (config-host:3) • host 4 (config-host:4) • host 5 (config-host:5) • host 6 (config-host:6) • host 7 (config-host:7) • host 8 (config-host:8) • host 9 (config-host:9) • host 10 (config-host:10) • host 11 (config-host:11) • host 12 (config-host:12) • host 13 (config-host:13) • host 14 (config-host:14) • host 15 (config-host:15) • host 16 (config-host:16) • host 17 (config-host:17) • host 18 (config-host:18) • host 19 (config-host:19) • host 20 (config-host:20) • host 21 (config-host:21) • host 22 (config-host:22) • host 23 (config-host:23) • host 24 (config-host:24) • host 25 (config-host:25) • host 26 (config-host:26) • host 27 (config-host:27) • host 28 (config-host:28) • host 29 (config-host:29) • host 30 (config-host:30) • host 31 (config-host:31) • host 32 (config-host:32) • http (config-http)



• icmp (config-icmp) • if 1 (config-if:eth0)

• failover (config-ethernet-failover:eth0) • link (config-ethernet:eth0) • qos (config-ethernet-qos:eth0)

• filter 1 (config-ethernet-qos-filter:eth0:1) • filter 2 (config-ethernet-qos-filter:eth0:2) • filter 3 (config-ethernet-qos-filter:eth0:3) • filter 4 (config-ethernet-qos-filter:eth0:4) • filter 5 (config-ethernet-qos-filter:eth0:5) • filter 6 (config-ethernet-qos-filter:eth0:6) • filter 7 (config-ethernet-qos-filter:eth0:7) • filter 8 (config-ethernet-qos-filter:eth0:8) • filter 9 (config-ethernet-qos-filter:eth0:9) • filter 10 (config-ethernet-qos-filter:eth0:10) • filter 11 (config-ethernet-qos-filter:eth0:11) • filter 12 (config-ethernet-qos-filter:eth0:12) • filter 13 (config-ethernet-qos-filter:eth0:13) • filter 14 (config-ethernet-qos-filter:eth0:14) • filter 15 (config-ethernet-qos-filter:eth0:15) • filter 16 (config-ethernet-qos-filter:eth0:16) • filter 17 (config-ethernet-qos-filter:eth0:17) • filter 18 (config-ethernet-qos-filter:eth0:18) • filter 19 (config-ethernet-qos-filter:eth0:19) • filter 20 (config-ethernet-qos-filter:eth0:20) • filter 21 (config-ethernet-qos-filter:eth0:21) • filter 22 (config-ethernet-qos-filter:eth0:22) • filter 23 (config-ethernet-qos-filter:eth0:23) • filter 24 (config-ethernet-qos-filter:eth0:24) • filter 25 (config-ethernet-qos-filter:eth0:25) • filter 26 (config-ethernet-qos-filter:eth0:26) • filter 27 (config-ethernet-qos-filter:eth0:27) • filter 28 (config-ethernet-qos-filter:eth0:28) • filter 29 (config-ethernet-qos-filter:eth0:29) • filter 30 (config-ethernet-qos-filter:eth0:30) • filter 31 (config-ethernet-qos-filter:eth0:31) • filter 32 (config-ethernet-qos-filter:eth0:32)

• if 2 (config-if:wlan0) • failover (config-wlan-failover:wlan0) • link (config-wlan:wlan0)

• choice 1 (config-wlan-choice:wlan0:1) • choice 2 (config-wlan-choice:wlan0:2) • choice 3 (config-wlan-choice:wlan0:3) • choice 4 (config-wlan-choice:wlan0:4)

• qos (config-wlan-qos:wlan0) • filter 1 (config-wlan-qos-filter:wlan0:1) • filter 2 (config-wlan-qos-filter:wlan0:2) • filter 3 (config-wlan-qos-filter:wlan0:3) • filter 4 (config-wlan-qos-filter:wlan0:4) • filter 5 (config-wlan-qos-filter:wlan0:5) • filter 6 (config-wlan-qos-filter:wlan0:6) • filter 7 (config-wlan-qos-filter:wlan0:7) • filter 8 (config-wlan-qos-filter:wlan0:8)



• filter 9 (config-wlan-qos-filter:wlan0:9) • filter 10 (config-wlan-qos-filter:wlan0:10) • filter 11 (config-wlan-qos-filter:wlan0:11) • filter 12 (config-wlan-qos-filter:wlan0:12) • filter 13 (config-wlan-qos-filter:wlan0:13) • filter 14 (config-wlan-qos-filter:wlan0:14) • filter 15 (config-wlan-qos-filter:wlan0:15) • filter 16 (config-wlan-qos-filter:wlan0:16) • filter 17 (config-wlan-qos-filter:wlan0:17) • filter 18 (config-wlan-qos-filter:wlan0:18) • filter 19 (config-wlan-qos-filter:wlan0:19) • filter 20 (config-wlan-qos-filter:wlan0:20) • filter 21 (config-wlan-qos-filter:wlan0:21) • filter 22 (config-wlan-qos-filter:wlan0:22) • filter 23 (config-wlan-qos-filter:wlan0:23) • filter 24 (config-wlan-qos-filter:wlan0:24) • filter 25 (config-wlan-qos-filter:wlan0:25) • filter 26 (config-wlan-qos-filter:wlan0:26) • filter 27 (config-wlan-qos-filter:wlan0:27) • filter 28 (config-wlan-qos-filter:wlan0:28) • filter 29 (config-wlan-qos-filter:wlan0:29) • filter 30 (config-wlan-qos-filter:wlan0:30) • filter 31 (config-wlan-qos-filter:wlan0:31) • filter 32 (config-wlan-qos-filter:wlan0:32)

• if 3 (config-if:usb0) • failover (config-ethernet-failover:usb0) • qos (config-ethernet-qos:usb0)

• filter 1 (config-ethernet-qos-filter:usb0:1) • filter 2 (config-ethernet-qos-filter:usb0:2) • filter 3 (config-ethernet-qos-filter:usb0:3) • filter 4 (config-ethernet-qos-filter:usb0:4) • filter 5 (config-ethernet-qos-filter:usb0:5) • filter 6 (config-ethernet-qos-filter:usb0:6) • filter 7 (config-ethernet-qos-filter:usb0:7) • filter 8 (config-ethernet-qos-filter:usb0:8) • filter 9 (config-ethernet-qos-filter:usb0:9) • filter 10 (config-ethernet-qos-filter:usb0:10) • filter 11 (config-ethernet-qos-filter:usb0:11) • filter 12 (config-ethernet-qos-filter:usb0:12) • filter 13 (config-ethernet-qos-filter:usb0:13) • filter 14 (config-ethernet-qos-filter:usb0:14) • filter 15 (config-ethernet-qos-filter:usb0:15) • filter 16 (config-ethernet-qos-filter:usb0:16) • filter 17 (config-ethernet-qos-filter:usb0:17) • filter 18 (config-ethernet-qos-filter:usb0:18) • filter 19 (config-ethernet-qos-filter:usb0:19) • filter 20 (config-ethernet-qos-filter:usb0:20) • filter 21 (config-ethernet-qos-filter:usb0:21) • filter 22 (config-ethernet-qos-filter:usb0:22) • filter 23 (config-ethernet-qos-filter:usb0:23) • filter 24 (config-ethernet-qos-filter:usb0:24) • filter 25 (config-ethernet-qos-filter:usb0:25) • filter 26 (config-ethernet-qos-filter:usb0:26)



• filter 27 (config-ethernet-qos-filter:usb0:27) • filter 28 (config-ethernet-qos-filter:usb0:28) • filter 29 (config-ethernet-qos-filter:usb0:29) • filter 30 (config-ethernet-qos-filter:usb0:30) • filter 31 (config-ethernet-qos-filter:usb0:31) • filter 32 (config-ethernet-qos-filter:usb0:32)

• ip (config-ip) • mach10 (config-mach10)

• line 1 (config-mach10-line:1) • line 2 (config-mach10-line:2) • line 3 (config-mach10-line:3)

• modbus (modbus) • rss (modbus-rss)

• rss (config-rss) • smtp (config-smtp) • snmp (config-snmp)

• snmpd (config-snmp-snmpd) • traps (config-snmp-traps)

• syslog (config-syslog) • terminal 1 (config-terminal:1) • terminal 2 (config-terminal:2) • terminal 3 (config-terminal:3) • terminal network (config-terminal:network) • user management (config-user-management) • vpn 1 (config-vpn:1)

• unreachable host detection (config-vpn-unreachable_host_detection:1)

• wlan profiles (config-profiles) • edit 1 (config-profile-basic:default_infra2)

• advanced (config-profile-advanced:default_infra2) • security (config-profile-security:default_infra2)

• wep (config-profile-security-wep:default_infra2)

• key 1 (config-profile-security-wep-key:default_infra2:1)




• wpax (config-profile-security-wpax:default_infra2)

• device (device) • reboot schedule (device-reboot-schedule)

• dns (dns) • email 1 (email:1) • email 2 (email:2) • email 3 (email:3) • email 4 (email:4) • email 5 (email:5) • email 6 (email:6) • email 7 (email:7)



• email 8 (email:8) • email 9 (email:9) • email 10 (email:10) • email 11 (email:11) • email 12 (email:12) • email 13 (email:13) • email 14 (email:14) • email 15 (email:15) • email 16 (email:16) • filesystem (filesystem)

• mass storage (filesystem-mass_storage) • line 1 (line:1) • line 2 (line:2) • ssh (ssh)

• client (ssh-client) • server (ssh-server)

• ssl (ssl) • credentials (ssl-credentials) • trusted authorities (ssl-auth)

• tunnel 1 (tunnel:1) • accept (tunnel-accept:1)

• password (tunnel-accept-password:1) • connect (tunnel-connect:1)

• host 1 (tunnel-connect-host:1:1) • host 2 (tunnel-connect-host:1:2) • host 3 (tunnel-connect-host:1:3) • host 4 (tunnel-connect-host:1:4) • host 5 (tunnel-connect-host:1:5) • host 6 (tunnel-connect-host:1:6) • host 7 (tunnel-connect-host:1:7) • host 8 (tunnel-connect-host:1:8) • host 9 (tunnel-connect-host:1:9) • host 10 (tunnel-connect-host:1:10) • host 11 (tunnel-connect-host:1:11) • host 12 (tunnel-connect-host:1:12) • host 13 (tunnel-connect-host:1:13) • host 14 (tunnel-connect-host:1:14) • host 15 (tunnel-connect-host:1:15) • host 16 (tunnel-connect-host:1:16)

• disconnect (tunnel-disconnect:1) • modem (tunnel-modem:1) • packing (tunnel-packing:1) • serial (tunnel-serial:1)



• host 1 (tunnel-connect-host:2:1) • host 2 (tunnel-connect-host:2:2) • host 3 (tunnel-connect-host:2:3) • host 4 (tunnel-connect-host:2:4) • host 5 (tunnel-connect-host:2:5) • host 6 (tunnel-connect-host:2:6)



• host 7 (tunnel-connect-host:2:7) • host 8 (tunnel-connect-host:2:8) • host 9 (tunnel-connect-host:2:9) • host 10 (tunnel-connect-host:2:10) • host 11 (tunnel-connect-host:2:11) • host 12 (tunnel-connect-host:2:12) • host 13 (tunnel-connect-host:2:13) • host 14 (tunnel-connect-host:2:14) • host 15 (tunnel-connect-host:2:15) • host 16 (tunnel-connect-host:2:16)




• host 1 (tunnel-connect-host:3:1) • host 2 (tunnel-connect-host:3:2) • host 3 (tunnel-connect-host:3:3) • host 4 (tunnel-connect-host:3:4) • host 5 (tunnel-connect-host:3:5) • host 6 (tunnel-connect-host:3:6) • host 7 (tunnel-connect-host:3:7) • host 8 (tunnel-connect-host:3:8) • host 9 (tunnel-connect-host:3:9) • host 10 (tunnel-connect-host:3:10) • host 11 (tunnel-connect-host:3:11) • host 12 (tunnel-connect-host:3:12) • host 13 (tunnel-connect-host:3:13) • host 14 (tunnel-connect-host:3:14) • host 15 (tunnel-connect-host:3:15) • host 16 (tunnel-connect-host:3:16)


• usb 1 (usb-line:1) • xml (xml)



Table 5-1 Commands and Levels

accept (tunnel-accept:3) level commands accept mode always Enables the tunneling server to always accept tunneling

connections. accept mode any character Enables the tunneling server to accept tunneling connec-

tions only when a character is received through the corre-sponding line (serial port).

accept mode disable Disables accept mode tunneling. accept mode modem control asserted Enables the tunneling server to accept tunneling connec-

tions when the modem control pin is asserted. accept mode modem emulation Enables modem emulation for accept mode tunneling. accept mode start character Enables accept mode tunneling when the configured start

character is received on the line. aes decrypt key <hexadecimal> Sets the accept tunnel AES decrypt key with up to 16

bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.

aes decrypt key text <text> Sets the accept tunnel AES decrypt key with up to 16 bytes. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

aes encrypt key <hexadecimal> Sets the accept tunnel AES encrypt key with up to 16 bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.

aes encrypt key text <text> Sets the accept tunnel AES encrypt key with up to 16 bytes. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

block network disable Forwards (tunnels) network data in accept mode tunnel-ing.

block network enable Discards all data coming in from the accept mode tunnel before forwarding it to the serial interface (generally used for debugging).

block serial disable Forwards (tunnels) serial data in accept mode tunneling. block serial enable Discards all data coming in from the serial interface before

forwarding it to the accept mode tunnel (generally used for debugging).

clrscrn Clears the screen. credentials <text> Selects the RSA/DSA certificates by name for the SSL

server. default accept mode Restores the default accept mode as 'always'. default local port Uses the default port number as the local port for accept

mode tunneling. The default port is 10000 + n, where 'n' is the line number for this tunnel.

default protocol Restores the default accept mode tunneling protocol as 'TCP'.

default start character Defaults the accept mode start character.



default tcp keep alive Defaults the TCP keep alive time. default tcp keep alive interval Restores the default 45 second accept mode TCP keep

alive timeout. default tcp keep alive probes Defaults the TCP keep alive probes. email connect <number> Sets an email profile to use to send an email alert upon

establishing an accept mode tunnel. <number> = the number of the email profile to use.

email disconnect <number> Sets an email profile to use to send an email alert upon closing an accept mode tunnel. <number> = the number of the email profile to use.

exit Returns to the tunnel level. flush serial disable Characters already in the serial data buffer are retained

upon establishing an accept mode tunneling connection. flush serial enable Flushes the serial data buffer upon establishing an accept

mode tunneling connection. flush start character disable Enables forwarding of the accept start character into the

network. flush start character enable Disables forwarding of the accept start character into the

network. initial send binary <binary> Sets the accept tunnel Initial Send text allowing for binary

characters. <binary> = string in binary format that will be sent out the network upon connection. Within [] use binary decimal up to 255 or hex up to 0xFF.

initial send set <text> Sets the accept tunnel Initial Send text. <text> = ascii string that will be sent out the network upon connection.

kill connection Disconnects the active accept mode tunneling connection. local port <number> Sets the port to use for accept mode tunneling. <number>

= number of the port to use. no aes decrypt key Removes the accept tunnel AES decrypt key. no aes encrypt key Removes the accept tunnel AES encrypt key. no credentials Clears the RSA/DSA certificate selection for the SSL

server. no email connect Discontinues sending email alerts upon establishing an

accept mode tunnel. no email disconnect Discontinues sending email alerts upon closing an accept

mode tunnel. no initial send Removes the accept tunnel Initial Send string. password Enters the next lower level. protocol ssh Uses SSH protocol for accept mode tunneling. protocol ssl Uses SSL protocol for accept mode tunneling. protocol tcp Uses TCP protocol for accept mode tunneling. protocol tcp aes Uses TCP protocol with AES encryption for accept mode

tunneling. protocol telnet Uses Telnet protocol (with IAC) for accept mode tunnel-

ing. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays tunnel accept status. start character <control> Sets the accept mode start character. The character may



be input as text, control, decimal, or hex. A control charac-ter has the form <control>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

tcp keep alive <milliseconds> Sets the TCP keep alive time. This is the initial keep alive timeout. <milliseconds> = timer value, in milliseconds.

tcp keep alive interval <milliseconds> Enables TCP keep alive for accept mode tunneling and sets the timer. <milliseconds> = TCP keep alive for accept mode in milliseconds.

tcp keep alive probes <number> Sets the number of TCP keep alive probes. <number> = number of TCP keep alive probes.

write Stores the current configuration in permanent memory. accept (tunnel-accept:2) level commands accept mode always Enables the tunneling server to always accept tunneling










block network disable Forwards (tunnels) network data in accept mode tunnel-ing.

block network enable Discards all data coming in from the accept mode tunnel before forwarding it to the serial interface (generally used for debugging).



clrscrn Clears the screen.



credentials <text> Selects the RSA/DSA certificates by name for the SSL server.

default accept mode Restores the default accept mode as 'always'. default local port Uses the default port number as the local port for accept



default start character Defaults the accept mode start character. default tcp keep alive Defaults the TCP keep alive time. default tcp keep alive interval Restores the default 45 second accept mode TCP keep















mode tunnel. no initial send Removes the accept tunnel Initial Send string. password Enters the next lower level. protocol ssh Uses SSH protocol for accept mode tunneling. protocol ssl Uses SSL protocol for accept mode tunneling. protocol tcp Uses TCP protocol for accept mode tunneling.



protocol tcp aes Uses TCP protocol with AES encryption for accept mode tunneling.

protocol telnet Uses Telnet protocol (with IAC) for accept mode tunnel-ing.

show Displays the current configuration. show history Displays the last 20 commands entered during the current






write Stores the current configuration in permanent memory. accept (tunnel-accept:1) level commands accept mode always Enables the tunneling server to always accept tunneling










block network disable Forwards (tunnels) network data in accept mode tunnel-



ing. block network enable Discards all data coming in from the accept mode tunnel

before forwarding it to the serial interface (generally used for debugging).




server. default accept mode Restores the default accept mode as 'always'. default local port Uses the default port number as the local port for accept



default start character Defaults the accept mode start character. default tcp keep alive Defaults the TCP keep alive time. default tcp keep alive interval Restores the default 45 second accept mode TCP keep

















mode tunnel. no initial send Removes the accept tunnel Initial Send string. password Enters the next lower level. protocol ssh Uses SSH protocol for accept mode tunneling. protocol ssl Uses SSL protocol for accept mode tunneling. protocol tcp Uses TCP protocol for accept mode tunneling. protocol tcp aes Uses TCP protocol with AES encryption for accept mode

tunneling. protocol telnet Uses Telnet protocol (with IAC) for accept mode tunnel-

ing. show Displays the current configuration. show history Displays the last 20 commands entered during the current






write Stores the current configuration in permanent memory. access point (config-access-point) level commands channel <number> Sets the channel on which the Access Point will operate. channel selection automatic Sets channel selection to automatic. channel selection configured Sets channel selection to configured. clrscrn Clears the screen. default channel Clears the Access Point channel setting. default channel selection Sets to default channel selection, which is 'Automatic'. default ip address Restores IP address of Access Point to the default value. default suite Restores the security method (suite) to the default value

(None). dns redirect <text> Set the DNS redirect. <text> = Hostname. exit Returns to the config level. ip address <ip address/cidr> Sets the IP address of Access Point. Formats accepted:

192.168.1.1 (default mask) 192.168.1.1/24 (CIDR) "192.168.1.1 255.255.255.0" (explicit mask)

multicast forwarding disable Disables Multicast Forwarding. multicast forwarding enable Enables Multicast Forwarding. network name <text> Set Network Name (SSID). <text> = Network

Name(SSID). no dns redirect Clears the DNS redirect.



no network name Clears Network Name (SSID). no passphrase Clears the password. passphrase <text> Sets the value for the password. <text> = put quotes

around the characters (max 63). show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays statistics. state disable Disables Access Point. state enable Enables Access Point. suite none Sets the security suite to None. suite wpa Sets the security suite to WPA. suite wpa2 Sets the security suite to WPA2. write Stores the current configuration in permanent memory. action (config-action-select) level commands clrscrn Clears the screen. eth0 link state change Enters the eth0 link state change alarm level. exit Exits to the config level. on scheduled reboot Enters the on scheduled reboot alarm level. show history Displays the last 20 commands entered during the current

CLI session. usb0 link state change Enters the usb0 link state change alarm level. wlan0 link state change Enters the wlan0 link state change alarm level. write Stores the current configuration in permanent memory. advanced (config-profile-advanced:default_infra2) level commands apply wlan Try out WLAN settings without saving them to Flash. If the

settings do not work, when you reboot the device, it will still have the original settings.

basic Switch to basic level clrscrn Clears the screen. default tx power maximum Restores the maximum TX power to the default value (14

dBm). exit Exit to the profiles level power management disable Disables power management. power management enable Enables power management. security Switch to security level show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. tx power maximum <dBm> Sets the TX power maximum in dBm. <dBm> = measure

of power in decibels with respect to one milliwatt. write Stores the current configuration in permanent memory. applications (config-applications) level commands clrscrn Clears the screen. exit Returns to the config level. no reserved ports Restores the default reserved ports. no reserved start port Clears the reserved start port.



python <instance> Enters the next lower level. Specify the instance for the next lower level.

python install <zip|tar.gz file> Install a python package <zip | tar.gz file> = path of pack-age to install.

python kill <pid> Kill a python script <pid> = PID of running script or 'all' for all scripts.

python remove all Uninstall python package and all installed packages. python run <instance> Runs a python script <instance> = index of the script to be

executed. python show installed Show installed python packages. python show status Show running python scripts. python uninstall <zip|tar.gz file|File> Uninstall a python package <zip | tar.gz file> = path of

package to uninstall. <File> = file to uninstall (from list of installed packages).

reserved ports <number> Sets the number of reserved ports. reserved start port <number> Sets the reserved start port. <number> = start port num-

ber. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. arp (config-arp) level commands add <IP address> <MAC address> <Interface name> Adds an entry to the ARP table, mapping an IP address to

a MAC address. <ip address> = IP address to be mapped. <mac address> = MAC address in colon-separated form. <interface name> = Interface name

clrscrn Clears the screen. exit Exits to the configuration level. remove all Removes all entries from the ARP cache. remove ip <IP address> <Interface name> Removes an entry from the ARP cache. <ip address> =

address of the entry being removed. <interface name> = Interface name

show cache Displays the ARP cache table. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. bridge 1 (config-bridge:br0) level commands auto detect ip address disable Disables learning the IPv4 address of the bridged client. auto detect ip address enable Enables learning the IPv4 address of the bridged client. bridging initial scan interval <seconds> Sets the scan interval before learning the IP address of

the bridged client. bridging ip address <IP address> Sets the Bridging IP Address. bridging ipv6 address <ipv6 address> Sets the Bridging IPv6 Address. IPv6 addresses are writ-

ten in eight groups of four hexadecimal digits separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334 Network address ranges are written in CIDR notation. A network is denoted by the first address in the block (ending in all zeroes), a slash (/), and a decimal value equal to the size in bits of the prefix

bridging scan interval <seconds> Sets the scan interval after learning the IP address of the



bridged client. clrscrn Clears the screen. default bridging initial scan interval Restores the default initial scan interval. default bridging scan interval Restores the default scan interval. default ethernet interface Restores the default Bridging ethernet interface. ethernet interface <text> Sets the Bridging ethernet interface. exit Exits to the config level. network access for gateway disable Disables network access for gateway in transparent bridg-

ing mode. network access for gateway enable Enables network access for gateway in transparent bridg-

ing mode. no bridging ip address Removes the Bridging MAC Address. no bridging ipv6 address Removes the Bridging IPv6 Address. no bridging mac address Removes the Bridging MAC Address. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Show bridge statistics show status Show bridge status state disable Disables bridging. state enable Enables bridging. transparent mode disable Disables transparent mode. transparent mode enable Enables transparent mode. write Stores the current configuration in permanent memory. choice 1 (config-wlan-choice:wlan0:1) level commands apply wlan Try out WLAN settings without saving them to Flash. If the


clrscrn Clears the screen. exit Exits to the next higher level. no profile Removes reference to the profile. profile <text> Selects a profile. <text> = name of the profile. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. choice 2 (config-wlan-choice:wlan0:2) level commands apply wlan Try out WLAN settings without saving them to Flash. If the



CLI session.



write Stores the current configuration in permanent memory. choice 3 (config-wlan-choice:wlan0:3) level commands apply wlan Try out WLAN settings without saving them to Flash. If the



CLI session. write Stores the current configuration in permanent memory. choice 4 (config-wlan-choice:wlan0:4) level commands apply wlan Try out WLAN settings without saving them to Flash. If the



CLI session. write Stores the current configuration in permanent memory. cli (config-cli) level commands clrscrn Clears the screen. default inactivity timeout The default inactivity timeout will apply to CLI sessions. default quit connect line Restores the default string to quit the 'connect line',

'telnet', and 'ssh' commands. enable level password <text> Sets the enable-level password. exit Exits to the configuration level. inactivity timeout <minutes> Sets the inactivity timeout for all CLI sessions. line authentication disable No password required for Line CLI users. line authentication enable Challenges the Line CLI user with a password. no enable level password Removes the enable-level password. no inactivity timeout No inactivity timeout will apply to CLI sessions. quit connect line <control> Sets the string used to quit the 'connect line', 'telnet', and

'ssh' commands. The characters may be input as text or control. A control character has the form <control>C.


CLI session. ssh Change to menu level for SSH configuration and status. telnet Change to menu level for Telnet configuration and status. write Stores the current configuration in permanent memory. client (ssh-client) level commands



clrscrn Clears the screen. default user <username> command Restore the user command to the default login shell delete all known hosts Remove all known hosts delete all users Remove all users delete known host <server> Remove known host delete user <username> Delete the named user exit Exits to the ssh level. known host <server> Set known host RSA or DSA key no known host <server> dsa Remove known host DSA key no known host <server> rsa Remove known host RSA key no user <username> dsa Remove user DSA key no user <username> rsa Remove user RSA key show Show SSH Client settings show history Displays the last 20 commands entered during the current

CLI session. show known host <server> Show known host RSA and DSA keys show user <username> Show information for a user user <username> Set username and RSA or DSA keys user <username> command <command> Customizes the user command user <username> generate dsa 1024 Generate DSA public and private keys user <username> generate dsa 2048 Generate DSA public and private keys user <username> generate dsa 4096 Generate DSA public and private keys user <username> generate dsa 512 Generate DSA public and private keys user <username> generate dsa 768 Generate DSA public and private keys user <username> generate rsa 1024 Generate RSA public and private keys user <username> generate rsa 2048 Generate RSA public and private keys user <username> generate rsa 4096 Generate RSA public and private keys user <username> generate rsa 512 Generate RSA public and private keys user <username> generate rsa 768 Generate RSA public and private keys user <username> password <password> Set username with password and optional RSA or DSA

keys write Stores the current configuration in permanent memory. clock (config-clock) level commands clock set <time(hh:mm:ss)> <day (1-31)> <month text> <year>

Sets the system clock.

clock timezone Shows possible time zone names. clock timezone <time zone> Sets the timezone to be displayed. Use "clock timezone"

to show choices. clrscrn Clears the screen. default clock timezone Restores the default timezone, which is UTC. default synchronization method Restores the default time synchronization method (Manu-

al). exit Exits to the configuration level. ntp Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current



CLI session. show system clock Displays the system clock. synchronization method manual Set time manually. synchronization method sntp Synchronize time with a NTP server. write Stores the current configuration in permanent memory. configure (config) level commands access point Enters the access point level. action Enters the config action level. applications Enters the applications level. arp Changes to the command level for ARP configuration and

status. bridge <instance> Changes to the bridge configuration level. cli Change to menu level for CLI configuration and status clock Change to menu level for Clock configuration and status clrscrn Clears the screen. diagnostics Enters the diagnostics level. discovery Enters the discovery level. exit Exits to the enable level. ftp Enters the ftp level. gateway Enters the gateway level. gre <instance> Change to gre level. host <number> Change to config host level http Enters the http level. icmp Changes to the command level for ICMP configuration

and status. if <instance> Changes to the interface configuration level. ip Changes to the command level for IP configuration and

status. kill ssh <session> Kills SSH session with index from "show sessions" kill telnet <session> Kills Telnet session with index from "show sessions" mach10 Enters the mach10 level. modbus Changes to the modbus configuration level. rss Change to menu level for RSS configuration and status show Displays system information. show history Displays the last 20 commands entered during the current

CLI session. show lines Displays line information. smtp Changes to the command level for SMTP configuration

and status. snmp Enters the snmp level. syslog Enters the syslog level. terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. user management Enters the config-user-management level. vpn <instance> Change to vpn level.



wlan profiles Enters the WLAN profiles configuration level. write Stores the current configuration in permanent memory. connect (tunnel-connect:3) level commands block network disable Forwards (tunnels) network data in connect mode tunnel-

ing. block network enable Discards all data coming in from the connect mode tunnel


block serial disable Forwards (tunnels) serial data in connect mode tunneling. block serial enable Discards all data coming in from the serial interface before

forwarding it to the connect mode tunnel (generally used for debugging).

clrscrn Clears the screen. connect mode always Enables the tunneling server to always establish tunneling

connections. connect mode any character Enables the tunneling server to establish a tunneling con-

nection when a character is received on the correspond-ing line (serial port).

connect mode disable Disables connect mode tunneling. connect mode modem control asserted Enables the tunneling server to make tunneling connec-

tions when the modem control pin is asserted. connect mode modem emulation Enables modem emulation for connect mode tunneling. connect mode start character Enables connect mode tunneling when the configured

start character is received on the line. default connect mode Restores the default connect mode as 'disable'. default host mode Connects to the first host in the list that accepts the con-

nection. default local port Uses a random port number as the local port for establish-

ing tunneling connections to other devices. default reconnect time Restores the default reconnect time value for connect

mode tunneling. default start character Defaults the connect mode start character. email connect <number> Sets an email profile to use to send an email alert upon

establishing a connect mode tunnel. <number> = the number of the email profile to use.

email disconnect <number> Sets an email profile to use to send an email alert upon closing a connect mode tunnel. <number> = the number of the email profile to use.


upon establishing a connect mode tunneling connection. flush serial enable Flushes the serial data buffer upon establishing a connect

mode tunneling connection. flush start character disable Enables forwarding of the connect start character into the

network. flush start character enable Disables forwarding of the connect start character into the

network. host <instance> Enters the next lower level. Specify the instance for the

next lower level. host mode sequential Connects to the first host in the list that accepts the con-

nection.



host mode simultaneous Selects simultaneous connections to all hosts on the host list.

kill connection Disconnects the active connect mode tunneling connec-tion or connections.

local port <number> Sets a specific port for use as the local port. <number> = the number of the port to use.

no email connect Discontinues sending email alerts upon establishing a connect mode tunnel.

no email disconnect Discontinues sending email alerts upon closing a connect mode tunnel.

promote host <number> Promotes the identified host, exchanging it place with the host above it, to adjust the order of the defined hosts.

reconnect time <milliseconds> Sets the reconnect time value for tunneling connections established by the device in milliseconds. <milliseconds> = timeout in milliseconds.


CLI session. show status Displays tunnel connect status. start character <control> Sets the connect mode start character. The character may


write Stores the current configuration in permanent memory. connect (tunnel-connect:2) level commands block network disable Forwards (tunnels) network data in connect mode tunnel-



block serial disable Forwards (tunnels) serial data in connect mode tunneling. block serial enable Discards all data coming in from the serial interface before









ing tunneling connections to other devices.



default reconnect time Restores the default reconnect time value for connect mode tunneling.

default start character Defaults the connect mode start character. email connect <number> Sets an email profile to use to send an email alert upon









nection. host mode simultaneous Selects simultaneous connections to all hosts on the host

list. kill connection Disconnects the active connect mode tunneling connec-

tion or connections. local port <number> Sets a specific port for use as the local port. <number> =

the number of the port to use. no email connect Discontinues sending email alerts upon establishing a

connect mode tunnel. no email disconnect Discontinues sending email alerts upon closing a connect

mode tunnel. promote host <number> Promotes the identified host, exchanging it place with the

host above it, to adjust the order of the defined hosts. reconnect time <milliseconds> Sets the reconnect time value for tunneling connections

established by the device in milliseconds. <milliseconds> = timeout in milliseconds.




write Stores the current configuration in permanent memory. connect (tunnel-connect:1) level commands block network disable Forwards (tunnels) network data in connect mode tunnel-


before forwarding it to the serial interface (generally used



for debugging). block serial disable Forwards (tunnels) serial data in connect mode tunneling. block serial enable Discards all data coming in from the serial interface before









ing tunneling connections to other devices. default reconnect time Restores the default reconnect time value for connect

mode tunneling. default start character Defaults the connect mode start character. email connect <number> Sets an email profile to use to send an email alert upon









nection. host mode simultaneous Selects simultaneous connections to all hosts on the host

list. kill connection Disconnects the active connect mode tunneling connec-

tion or connections. local port <number> Sets a specific port for use as the local port. <number> =

the number of the port to use. no email connect Discontinues sending email alerts upon establishing a



connect mode tunnel. no email disconnect Discontinues sending email alerts upon closing a connect

mode tunnel. promote host <number> Promotes the identified host, exchanging it place with the

host above it, to adjust the order of the defined hosts. reconnect time <milliseconds> Sets the reconnect time value for tunneling connections

established by the device in milliseconds. <milliseconds> = timeout in milliseconds.




write Stores the current configuration in permanent memory. connection 1 (config-action-http_post-connection:wlan0 link state change:1) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-

ed to. local port <number> Sets the local port. no host Clears HTTP server IP address or hostname. no password Clears the Password. no url Clears HTTP request URL. no username Clears the Username. password <text> Sets the Password used to logon to HTTP server. port <number> Sets the Port number which HTTP server is listening to. protocol http Selects HTTP Protocol. protocol https Selects HTTPS Protocol. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. url <text> Sets HTTP request URL following IP address or host-

name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-ftp_put-connection:wlan0 link state change:1) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol.



default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected

to. local port <number> Sets default local port. no host Clears FTP server IP address or hostname. no password Sets default Password. password <text> Sets the Password used to logon to FTP server. port <number> Sets the Port number which FTP server is listening to. protocol ftp Selects FTP Protocol. protocol ftps Selects FTPS Protocol. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-http_post-connection:usb0 link state change:1) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-ftp_put-connection:usb0 link state change:1) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number.



default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-http_post-connection:on scheduled reboot:1) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-ftp_put-connection:on scheduled reboot:1) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port.



default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-http_post-connection:eth0 link state change:1) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 1 (config-action-ftp_put-connection:eth0 link state change:1) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename.



default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-http_post-connection:wlan0 link state change:2) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-ftp_put-connection:wlan0 link state change:2) level commands clrscrn Clears the screen.



default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-http_post-connection:usb0 link state change:2) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-ftp_put-connection:usb0 link state change:2) level commands



clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-http_post-connection:on scheduled reboot:2) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server. write Stores the current configuration in permanent memory.



connection 2 (config-action-ftp_put-connection:on scheduled reboot:2) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. connection 2 (config-action-http_post-connection:eth0 link state change:2) level commands clrscrn Clears the screen. default local port Sets the local port. default port Sets default Port number. default protocol Sets default HTTP Protocol. exit Exits to the next higher level. host <text> Sets HTTP server IP address or hostname to be connect-



name. username <text> Sets the Username used to logon to HTTP server.



write Stores the current configuration in permanent memory. connection 2 (config-action-ftp_put-connection:eth0 link state change:2) level commands clrscrn Clears the screen. default filename Sets default FTP remote Filename. default local port Sets default local port. default port Sets default Port number. default protocol Sets default FTP Protocol. default username Sets default Username. exit Exits to the next higher level. filename <text> Sets FTP remote Filename. host <text> Sets FTP server IP address or hostname to be connected


CLI session. username <text> Sets the Username used to logon to FTP server. write Stores the current configuration in permanent memory. credentials (ssl-credentials) level commands clrscrn Clears the screen. create <credential name> Create a new credential name delete <credential name> Delete existing credential by name edit <credential name> View or edit an existing credential exit Exits to the ssl level. show Show existing credential names show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. device (device) level commands auto show tlog Continuously displays the internal trouble log. clrscrn Clears the screen. default long name Restores the default product long name. default short name Restores the default product short name. exit Exit to the enable level. long name <name> Sets the product long name, displayed in command mode

and the Web interface. reboot schedule Enters the reboot schedule level short name <name> Sets the product short name, displayed in command

mode and the Web interface. <name> = maximum of eight characters.



show Show system information show hardware information Displays information about the hardware. show history Displays the last 20 commands entered during the current

CLI session. show lines Show line information show memory Displays current memory usage information. show task state Displays current task states. show tlog Displays the internal trouble log. write Stores the current configuration in permanent memory. dhcpserver (config-dhcpd) level commands clrscrn Clears the screen. default end ip address Restores end IP address of DHCP address pool to the

default value. default end ipv6 address Clears the end IPv6 address of DHCP address pool. default lease time Restores the lease time to default value (24 hours). default start ip address Restores start IP address of DHCP address pool to the

default value. default start ipv6 address Clears the start IPv6 address of DHCP address pool. delete all static leases Deletes all static leases. delete static lease <instance> Deletes an entry from the static lease table <instance> =

index of the entry being removed end ip address <IP address> Sets the end IP address of DHCP address pool. end ipv6 address <ipv6 address/prefix> Sets the end IPv6 address of DHCP address pool. IPv6

addresses are written in eight groups of four hexadecimal digits separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334 Network address ranges are written in CIDR notation. A network is denoted by the first address in the block (ending in all zeroes), a slash (/), and a decimal value equal to the size in bits of the prefix

ipv6 state disable Disables IPv6 DHCP server. ipv6 state enable Enables IPv6 DHCP server. lease time <hours> Sets the lease time. <number> = lease time in hours. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. start ip address <IP address> Sets the start IP address of DHCP address pool. start ipv6 address <ipv6 address/prefix> Sets the start IPv6 address of DHCP address pool. IPv6


state enable Enables DHCP server. static leases <number> Change to dhcpd static lease level. write Stores the current configuration in permanent memory. diagnostics (config-diagnostics) level commands clrscrn Clears the screen.



exit Returns to the config level. log Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. disconnect (tunnel-disconnect:3) level commands clrscrn Clears the screen. exit Returns to the tunnel level. flush serial disable Does not flush serial data upon closing a tunneling con-

nection. flush serial enable Flushes serial data buffer when a tunneling connection is

closed. flush stop character disable Forwards the stop character from the Line to the network. flush stop character enable Prevents the stop character from the Line from being for-

warded to the network. modem control disable Does not watch the modem control pin to disconnect. modem control enable Watches the modem control pin and disconnects if it is not

asserted. no stop character Removes the stop character. no timeout Disables disconnect after timeout feature for tunneling

sessions. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. stop character <control> Sets the stop character. The character may be input as

text, control, decimal, or hex. A control character has the form <control>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

timeout <milliseconds> Disconnects when no data has been received on the line (serial port) for the specified length of time. <millisec-onds> = timeout in milliseconds.

write Stores the current configuration in permanent memory. disconnect (tunnel-disconnect:2) level commands clrscrn Clears the screen. exit Returns to the tunnel level. flush serial disable Does not flush serial data upon closing a tunneling con-





sessions.







write Stores the current configuration in permanent memory. disconnect (tunnel-disconnect:1) level commands clrscrn Clears the screen. exit Returns to the tunnel level. flush serial disable Does not flush serial data upon closing a tunneling con-





sessions. show Displays the current configuration. show history Displays the last 20 commands entered during the current




write Stores the current configuration in permanent memory. discovery (config-discovery) level commands clear counters Zeros Query Port counters clrscrn Clears the screen. default upnp port Resets the UPnP Server port to its default value

(0x77FF). exit Returns to the config level. no clear counters Unzeros Query Port counters show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays statistics and information about the discovery

services.



state disable Disables the Query Port server. state enable Enables the Query Port server. upnp port <number> Sets the port number the UPnP server will use. <number>

= port number. upnp state disable Disables the UPnP server. upnp state enable Enables the UPnP server. write Stores the current configuration in permanent memory. dns (dns) level commands clrscrn Clears the screen. exit Exits to the enable level. lookup <host_or_ip> Return a lookup on the DNS name or IP address. show Show DNS status. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. edit 1 (config-profile-basic:default_infra2) level commands advanced Switch to advanced level apply wlan Try out WLAN settings without saving them to Flash. If the


clrscrn Clears the screen. exit Exit to the profiles level network name <text> Sets the network name. no network name Clears the network name. security Switch to security level show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables this profile. state enable Enables this profile. write Stores the current configuration in permanent memory. email (config-action-email:wlan0 link state change) level commands alarm email email <number> Specifies the email number to send when the alarm turns

on. alarm email none Specifies no email when the alarm turns on. alarm message <text> Sets the email message to be sent when the alarm turns

on. alarm reminder interval <minutes> Sets the time interval that messages will be sent while the

alarm remains on. clrscrn Clears the screen. default alarm email Restores the default and no email is sent when the alarm

turns on. default normal email Restores the default and no email is sent when the alarm

turns off. exit Exits to the next higher level. no alarm message Removes the alarm email message. no alarm reminder interval Only one message will be sent when the alarm turns on.



no normal message Removes the normal email message. no normal reminder interval Only one message will be sent when the alarm turns off. normal email email <number> Specifies the email number to send when the alarm turns

off. normal email none Specifies no email when the alarm turns off. normal message <text> Sets the email message to be sent when the alarm turns

off. normal reminder interval <minutes> Sets the time interval that messages will be sent while the

alarm remains off. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. email (config-action-email:usb0 link state change) level commands alarm email email <number> Specifies the email number to send when the alarm turns





turns off. exit Exits to the next higher level. no alarm message Removes the alarm email message. no alarm reminder interval Only one message will be sent when the alarm turns on. no normal message Removes the normal email message. no normal reminder interval Only one message will be sent when the alarm turns off. normal email email <number> Specifies the email number to send when the alarm turns




CLI session. write Stores the current configuration in permanent memory. email (config-action-email:on scheduled reboot) level commands alarm email email <number> Specifies the email number to send when the alarm turns











CLI session. write Stores the current configuration in permanent memory. email (config-action-email:eth0 link state change) level commands alarm email email <number> Specifies the email number to send when the alarm turns








alarm remains off. show Shows the current configuration.



show history Displays the last 20 commands entered during the current CLI session.

write Stores the current configuration in permanent memory. email 1 (email:1) level commands auto show statistics Continuously displays email statistics. cc <text> Sets Cc addresses for email alerts. <text> = a quoted,

semicolon separated list of email addresses. clear log Clears all entries from the mail log. clear mail counters Sets the email counters to zero. clrscrn Clears the screen. default priority Sets X-Priority for email alerts to 3 (normal). email <number> Enters the configure email level. exit Exits to the enable level. message file <text> Specifies a text file, the contents of which will be the mes-

sage body of an email alert. <text> = the name of a local file.

no cc Removes the Cc addresses for email alerts. no clear mail counters Restores the email counters to the aggregate values. no message file Removes the file name, so the message body will be

empty. no reply to Removes the Reply To address for email alerts. no subject Removes subject used for email alerts. no to Removes the To addresses for email alerts. priority high Sets X-Priority for email alerts to 2 (high). priority low Sets X-Priority for email alerts to 4 (low). priority normal Sets X-Priority for email alerts to 3 (normal). priority urgent Sets X-Priority for email alerts to 1 (urgent). priority very low Sets X-Priority for email alerts to 5 (very low). reply to <text> Sets the Reply To address for email alerts. <text> = email

address to place in the Reply To field of the email alert. send Sends an email using the current settings. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show log Displays the email log. show statistics Displays email statistics. subject <text> Sets the Subject for email alerts. <text> = text to placed

as the subject. to <text> Sets To addresses for email alerts. <text> = a quoted,

semicolon separated list of email addresses. write Stores the current configuration in permanent memory. email 10 (email:10) level commands auto show statistics Continuously displays email statistics. cc <text> Sets Cc addresses for email alerts. <text> = a quoted,

semicolon separated list of email addresses. clear log Clears all entries from the mail log. clear mail counters Sets the email counters to zero.



clrscrn Clears the screen. default priority Sets X-Priority for email alerts to 3 (normal). email <number> Enters the configure email level. exit Exits to the enable level. message file <text> Specifies a text file, the contents of which will be the mes-










no cc Removes the Cc addresses for email alerts. no clear mail counters Restores the email counters to the aggregate values.



no message file Removes the file name, so the message body will be empty.

no reply to Removes the Reply To address for email alerts. no subject Removes subject used for email alerts. no to Removes the To addresses for email alerts. priority high Sets X-Priority for email alerts to 2 (high). priority low Sets X-Priority for email alerts to 4 (low). priority normal Sets X-Priority for email alerts to 3 (normal). priority urgent Sets X-Priority for email alerts to 1 (urgent). priority very low Sets X-Priority for email alerts to 5 (very low). reply to <text> Sets the Reply To address for email alerts. <text> = email








empty. no reply to Removes the Reply To address for email alerts. no subject Removes subject used for email alerts. no to Removes the To addresses for email alerts. priority high Sets X-Priority for email alerts to 2 (high). priority low Sets X-Priority for email alerts to 4 (low). priority normal Sets X-Priority for email alerts to 3 (normal). priority urgent Sets X-Priority for email alerts to 1 (urgent).



priority very low Sets X-Priority for email alerts to 5 (very low). reply to <text> Sets the Reply To address for email alerts. <text> = email










CLI session. show log Displays the email log. show statistics Displays email statistics.



subject <text> Sets the Subject for email alerts. <text> = text to placed as the subject.

to <text> Sets To addresses for email alerts. <text> = a quoted, semicolon separated list of email addresses.

write Stores the current configuration in permanent memory. email 14 (email:14) level commands auto show statistics Continuously displays email statistics. cc <text> Sets Cc addresses for email alerts. <text> = a quoted,









semicolon separated list of email addresses. clear log Clears all entries from the mail log.



clear mail counters Sets the email counters to zero. clrscrn Clears the screen. default priority Sets X-Priority for email alerts to 3 (normal). email <number> Enters the configure email level. exit Exits to the enable level. message file <text> Specifies a text file, the contents of which will be the mes-










no cc Removes the Cc addresses for email alerts.



no clear mail counters Restores the email counters to the aggregate values. no message file Removes the file name, so the message body will be









empty. no reply to Removes the Reply To address for email alerts. no subject Removes subject used for email alerts. no to Removes the To addresses for email alerts. priority high Sets X-Priority for email alerts to 2 (high). priority low Sets X-Priority for email alerts to 4 (low). priority normal Sets X-Priority for email alerts to 3 (normal).



priority urgent Sets X-Priority for email alerts to 1 (urgent). priority very low Sets X-Priority for email alerts to 5 (very low). reply to <text> Sets the Reply To address for email alerts. <text> = email










CLI session. show log Displays the email log.



show statistics Displays email statistics. subject <text> Sets the Subject for email alerts. <text> = text to placed











semicolon separated list of email addresses.



clear log Clears all entries from the mail log. clear mail counters Sets the email counters to zero. clrscrn Clears the screen. default priority Sets X-Priority for email alerts to 3 (normal). email <number> Enters the configure email level. exit Exits to the enable level. message file <text> Specifies a text file, the contents of which will be the mes-





















empty. no reply to Removes the Reply To address for email alerts. no subject Removes subject used for email alerts. no to Removes the To addresses for email alerts. priority high Sets X-Priority for email alerts to 2 (high). priority low Sets X-Priority for email alerts to 4 (low).



priority normal Sets X-Priority for email alerts to 3 (normal). priority urgent Sets X-Priority for email alerts to 1 (urgent). priority very low Sets X-Priority for email alerts to 5 (very low). reply to <text> Sets the Reply To address for email alerts. <text> = email










CLI session.



show log Displays the email log. show statistics Displays email statistics. subject <text> Sets the Subject for email alerts. <text> = text to placed










semicolon separated list of email addresses. write Stores the current configuration in permanent memory. enable (enable) level commands auto show interfaces Show interface statistics



auto show processes Continuously show thread runtime information clrscrn Clears the screen. configure Enters the configuration level. connect Show name and number for lines. connect line <line> Begin session on serial port. device Enters the device level. disable Exits the enable level. dns Enters the DNS level. email <number> Enters the configure email level. exit Exit from the system filesystem Enters the filesystem level. iperf <params> Run iperf with command line parameters passed in quot-

ed string. kill ssh <session> Kills SSH session with index from "show sessions" kill telnet <session> Kills Telnet session with index from "show sessions" line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. ping <host> Ping destination continuously with 5 second timeout ping <host> <count> Ping destination n times with 5 second timeout ping <host> <count> <timeout> Ping destination n times with x timeout (in seconds) ping6 <host> Ping destination continuously with 5 second timeout ping6 <host> <count> Ping destination n times with 5 second timeout ping6 <host> <count> <timeout> Ping destination n times with x timeout (in seconds) reload Reboot system reload factory defaults Reload factory defaults to permanent storage show Show system information show history Displays the last 20 commands entered during the current

CLI session. show interfaces Show interface statistics show ip sockets Show UDP/TCP state information show lines Show line information show multicast routes show state of VIFs and multicast routing tables show processes Show thread runtime information show routes show system routing table show rules show system rules show sessions Show active Telnet and SSH Sessions ssh Enters the SSH configuration level. ssh <optClientUsername> <host> Begin SSH session on network <host>. The optClien-

tUserName must match an SSH Client: Users configura-tion entry. Use "" in optClientUserName to prompt for host username and password.

ssh <optClientUsername> <host> <port> Begin SSH session on network <host>:<port>. The optClientUserName must match an SSH Client: Users configuration entry. Use "" in optClientUserName to prompt for host username and password.

ssl Enters the SSL configuration level. tcpdump <parameters> dump traffic on a network



telnet <host> Begin telnet session on network <host>. telnet <host> <port> Begin telnet session on network <host>:<port>. trace route <host> Trace route to destination trace route <host> <protocol> Trace route to destination using TCP, ICMP, or UDP tunnel <line> Enters the tunnel level. <line> = number of the tunnel line

(serial port) to be configured. usb <line> Enters the usb level. <line> = number of the line (usb port)

to be configured. write Stores the current configuration in permanent memory. xml Enters the XML level. eth0 link state change (config-action:eth0 link state change) level commands clrscrn Clears the screen. default delay Resets alarm processing delay to its default value. delay <seconds> Sets the delay in processing the alarm. Alarm actions will

not be executed if the cause is corrected within this time. email Enters the next lower level. exit Exits to the config alarm level. ftp put Enters the next lower level. http post Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays statistics. snmp trap Enters the next lower level. write Stores the current configuration in permanent memory. failover (config-ethernet-failover:usb0) level commands clrscrn Clears the screen. default failback threshold Restores the default Failback threshold. default failover interface Restores the default Failover interface. default failover threshold Restores the default Failover threshold. default interval Restores the default Ping interval. default method Restores the default ping method. default timeout Restores the default Ping response timeout. exit Exit back to interface configuration level failback threshold <pings> Sets the Failback threshold. If <pings> attempts are an-

swered, the device will Failback to original interface. failover interface <text> Sets the Failover interface. failover threshold <pings> Sets the Failover threshold. If <pings> attempts go unan-

swered, the device will Failover to selected interface. hostname <text> Sets the host name. <text> = name of the host to ping. interval <seconds> Sets the Ping interval in seconds. method icmp Ping using ICMP-ECHO. method tcp Ping using TCP. no hostname Clears the host name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session.



show status Show failover status state disable Disables Failover. state enable Enables Failover. test Test failover configuration timeout <seconds> Sets the Ping response timeout in seconds. write Stores the current configuration in permanent memory. failover (config-wlan-failover:wlan0) level commands clrscrn Clears the screen. default failback threshold Restores the default Failback threshold. default failover interface Restores the default Failover interface. default failover threshold Restores the default Failover threshold. default interval Restores the default Ping interval. default method Restores the default ping method. default timeout Restores the default Ping response timeout. exit Exit back to interface configuration level failback threshold <pings> Sets the Failback threshold. If <pings> attempts are an-

swered, the device will Failback to original interface. failover interface <text> Sets the Failover interface. failover threshold <pings> Sets the Failover threshold. If <pings> attempts go unan-

swered, the device will Failover to selected interface. hostname <text> Sets the host name. <text> = name of the host to ping. interval <seconds> Sets the Ping interval in seconds. method icmp Ping using ICMP-ECHO. method tcp Ping using TCP. no hostname Clears the host name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Show failover status state disable Disables Failover. state enable Enables Failover. test Test failover configuration timeout <seconds> Sets the Ping response timeout in seconds. write Stores the current configuration in permanent memory. failover (config-ethernet-failover:eth0) level commands clrscrn Clears the screen. default failback threshold Restores the default Failback threshold. default failover interface Restores the default Failover interface. default failover threshold Restores the default Failover threshold. default interval Restores the default Ping interval. default method Restores the default ping method. default timeout Restores the default Ping response timeout. exit Exit back to interface configuration level failback threshold <pings> Sets the Failback threshold. If <pings> attempts are an-

swered, the device will Failback to original interface. failover interface <text> Sets the Failover interface.



failover threshold <pings> Sets the Failover threshold. If <pings> attempts go unan-swered, the device will Failover to selected interface.

hostname <text> Sets the host name. <text> = name of the host to ping. interval <seconds> Sets the Ping interval in seconds. method icmp Ping using ICMP-ECHO. method tcp Ping using TCP. no hostname Clears the host name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Show failover status state disable Disables Failover. state enable Enables Failover. test Test failover configuration timeout <seconds> Sets the Ping response timeout in seconds. write Stores the current configuration in permanent memory. filesystem (filesystem) level commands cat <file> Show the contents of a file cd <directory> Change the current directory to the specified directory clrscrn Clears the screen. cp <source file> <destination file> Copy an existing file dump <file> Show contents of a file as a hex dump exit Exits to the enable level. format Format the file system and lose all data ls Show all files and directories in the current directory ls <directory> Show all files and directories in the specified directory mass storage Enters the next lower level. mkdir <directory> Create a directory mv <source file> <destination file> Move a file on the file system pwd Print working directory rm <file> Remove a file rmdir <directory> Remove a directory show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show tree Show all files and directories from current directory tftp get <source file> <destination file> <host> Get a file using TFTP tftp get <source file> <destination file> <host> <port> Get a file using TFTP tftp put <source file> <destination file> <host> Put a file using TFTP tftp put <source file> <destination file> <host> <port> Put a file using TFTP touch <file> Create a file filter 1 (config-ethernet-qos-filter:usb0:1) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level.



mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by two adjacent hex digits. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must en-close the value if it contains spaces.

network <text> Sets the filter Network. no mac address Removes the filter MAC Address. no network Removes the filter Network. no ports Removes the filter Port. ports <text> Sets the filter Port. priority background Sets the priority to Background. Bandwidth allocated is

5%-100%. priority best effort Sets the priority to Best Effort. Bandwidth allocated is

10%-100%. priority critical applications Sets the priority to Critical Applications. Bandwidth allo-

cated is 15%-100%. priority excellent effort Sets the priority to Excellent Effort. Bandwidth allocated is

10%-100%. priority internetwork control Sets the priority to Internetwork Control. Bandwidth allo-

cated is 5%-100%. priority network control Sets the priority to Network Control. Bandwidth allocated

is 5%-100%. priority video Sets the priority to Video. Bandwidth allocated is 20%-

100%. priority voice Sets the priority to Voice. Bandwidth allocated is 30%-

100%. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. filter 1 (config-wlan-qos-filter:wlan0:1) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by

two adjacent hex digits. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must en-close the value if it contains spaces.




cated is 15%-100%.



priority excellent effort Sets the priority to Excellent Effort. Bandwidth allocated is 10%-100%.

priority internetwork control Sets the priority to Internetwork Control. Bandwidth allo-cated is 5%-100%.

priority network control Sets the priority to Network Control. Bandwidth allocated is 5%-100%.

priority video Sets the priority to Video. Bandwidth allocated is 20%-100%.

priority voice Sets the priority to Voice. Bandwidth allocated is 30%-100%.

show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. filter 1 (config-ethernet-qos-filter:eth0:1) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by











CLI session. write Stores the current configuration in permanent memory. filter 10 (config-ethernet-qos-filter:usb0:10) level commands clrscrn Clears the screen.



default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by















10%-100%.



priority critical applications Sets the priority to Critical Applications. Bandwidth allo-cated is 15%-100%.


















CLI session. write Stores the current configuration in permanent memory.



filter 11 (config-ethernet-qos-filter:usb0:11) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by














5%-100%.



priority best effort Sets the priority to Best Effort. Bandwidth allocated is 10%-100%.





















CLI session. write Stores the current configuration in permanent memory. filter 12 (config-ethernet-qos-filter:usb0:12) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by













network <text> Sets the filter Network. no mac address Removes the filter MAC Address. no network Removes the filter Network. no ports Removes the filter Port.



ports <text> Sets the filter Port. priority background Sets the priority to Background. Bandwidth allocated is



































network <text> Sets the filter Network. no mac address Removes the filter MAC Address.



no network Removes the filter Network. no ports Removes the filter Port. ports <text> Sets the filter Port. priority background Sets the priority to Background. Bandwidth allocated is



































two adjacent hex digits. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC"



12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must en-close the value if it contains spaces.


































CLI session. write Stores the current configuration in permanent memory. filter 16 (config-wlan-qos-filter:wlan0:16) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level.


















cated is 15%-100%.




















CLI session. write Stores the current configuration in permanent memory. filter 17 (config-wlan-qos-filter:wlan0:17) level commands clrscrn Clears the screen.


















10%-100%.



filter 18 (config-wlan-qos-filter:wlan0:18) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by














5%-100%.


















CLI session. write Stores the current configuration in permanent memory. filter 22 (config-ethernet-qos-filter:eth0:22) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level.


















cated is 15%-100%.




















CLI session. write Stores the current configuration in permanent memory. filter 23 (config-ethernet-qos-filter:eth0:23) level commands clrscrn Clears the screen.


















10%-100%.



filter 24 (config-ethernet-qos-filter:eth0:24) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by














5%-100%.


















CLI session. write Stores the current configuration in permanent memory. filter 3 (config-ethernet-qos-filter:usb0:3) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level.


















cated is 15%-100%.




















CLI session. write Stores the current configuration in permanent memory. filter 30 (config-ethernet-qos-filter:usb0:30) level commands clrscrn Clears the screen.


















10%-100%.



filter 31 (config-ethernet-qos-filter:usb0:31) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by














5%-100%.


















CLI session. write Stores the current configuration in permanent memory. filter 7 (config-wlan-qos-filter:wlan0:7) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level.


















cated is 15%-100%.




















CLI session. write Stores the current configuration in permanent memory. filter 8 (config-wlan-qos-filter:wlan0:8) level commands clrscrn Clears the screen.


















10%-100%.



filter 9 (config-wlan-qos-filter:wlan0:9) level commands clrscrn Clears the screen. default priority Restores the default value of the priority (Excellent Effort). exit Exits to the next higher level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by














5%-100%.











CLI session. write Stores the current configuration in permanent memory. ftp (config-ftp) level commands clrscrn Clears the screen. data port <number> Sets the FTP server data-port. default data port Restores the FTP server data-port to default: 20. default passive mode ports Clears the FTP server number of passive ports. default passive mode start port Clears the FTP server passive mode start port. default port Restores the FTP server port to default: 21. exit Returns to the config level. passive mode ports <number> Sets the FTP server number of passive ports. passive mode start port <number> Sets the FTP server passive mode start port. port <number> Sets the FTP server port. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays the FTP statistics. state disable Disables the FTP server. state enable Enables the FTP server. write Stores the current configuration in permanent memory. ftp put (config-action-ftp_put:wlan0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the

next lower level. default mode Sets default of simultaneous connection mode. exit Exits to the next higher level. mode sequential Sets sequential mode; will stop after first connection that

goes through. mode simultaneous Sets simultaneous mode; will make all possible connec-

tions. no reminder interval Clears the FTP Put reminder interval. FTP Put is sent

once only.



reminder interval <minutes> Sets the FTP Put reminder interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. ftp put (config-action-ftp_put:usb0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the




once only. reminder interval <minutes> Sets the FTP Put reminder interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. ftp put (config-action-ftp_put:on scheduled reboot) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the





CLI session. write Stores the current configuration in permanent memory. ftp put (config-action-ftp_put:eth0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the







CLI session. write Stores the current configuration in permanent memory. gateway (config-gateway) level commands add forwarding rule <start port> <end port> <protocol> <ip>

Add a forwarding rule without a name.

add forwarding rule <start port> <end port> <target port> <protocol> <ingress ip> <ip>

Add a forwarding rule based on ip address without a name.

add forwarding rule with name <name> <start port> <end port> <protocol> <ip>

Add a forwarding rule with a name.

add forwarding rule with name <name> <start port> <tar-get port> <end port> <protocol> <ingress ip> <ip>

Add a forwarding rule based on ip address with a name.

add mac address filter <MAC address> <action> Add a MAC Address filter. add route <network> <gateway> <interface> <metric> Add a static route without a name. add route with name <name> <network> <gateway> <in-terface> <metric>

Add a static route with a name.

add virtual ip <IP address> <lan ip address> Add a Virtual IP. add virtual ip with name <name> <IP address> <lan ip address>

Add a Virtual IP with name.

clrscrn Clears the screen. default operating mode Restores operating mode to the default value (Disabled). default router ip address Restores IP address of router to the default value. default router ipv6 address Clears the IPv6 address of router. default wan interface Restores preferred WAN interface to the default value. delete all mac address filters Deletes all mac address filters. delete all routes Deletes all static routes. delete all rules Deletes all port forwarding rules. delete all virtual ip Deletes all virtual interfaces. delete mac address filter <instance> Deletes an entry from the mac address filters <instance>

= index of the entry being removed delete route <instance> Deletes an entry from the static routes <instance> = index

of the entry being removed. delete rule <instance> Deletes an entry from the port forwarding rules <instance>

= index of the entry being removed. delete virtual ip <instance> Delete virtual ip <instance> = index of the ip being re-

moved. dhcpserver Enters the dhcpserver level. exit Returns to the config level. firewall disable Disables firewall on WAN interface. firewall enable Enables firewall on WAN interface. mac address filter <number> Change to config mac filter level. mac address filter disable Disables MAC Address filtering. mac address filter enable Enables MAC Address filtering.



no primary dns Clears the name of the primary DNS server. no secondary dns Clears the name of the secondary DNS server. operating mode disabled Disables routing on WAN interface. operating mode gateway Enables routing with NAT on WAN interface. operating mode router Enables routing without NAT on WAN interface. port forwarding rule <number> Change to config gateway port forwarding level. primary dns <IP address> Sets the IP address of the primary DNS server. router ip address <ip address/cidr> Sets the IP address of router. Formats accepted:

192.168.1.1 (default mask) 192.168.1.1/24 (CIDR) "192.168.1.1 255.255.255.0" (explicit mask)

router ipv6 address <ipv6 address/prefix> Sets the IPv6 address of router. IPv6 addresses are writ-ten in eight groups of four hexadecimal digits separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334 Network address ranges are written in CIDR notation. A network is denoted by the first address in the block (ending in all zeroes), a slash (/), and a decimal value equal to the size in bits of the prefix

secondary dns <IP address> Sets the IP address of the secondary DNS server. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show routing table Show current routing table. show status Show gateway configuration and status. static route <number> Change to config gateway static route level. virtual ip <number> Change to virtual ip level. wan interface <text> Sets the preferred WAN interface. <text> = interface

name. write Stores the current configuration in permanent memory. gre 1 (config-gre:1) level commands clrscrn Clears the screen. default local network Restores the default local network name. default mtu Restores the default Maximum Transmission Unit (MTU)

size. exit Exits to the config level. gre <instance> Change to gre level. ip address <text> Sets the IP address and network mask. local network <text> Sets the local network name. <text> = local network

name. mtu <bytes> Sets the Maximum Transmission Unit (MTU) size. name <text> Sets the name. <text> = name. no ip address Clears the IP address. no name Clears the name. no remote host Clear the remote host. no remote network Clears the remote network IP address. remote host <text> Sets the remote host. <text> = remote host. remote network <text> Sets the remote network IP address and network mask. show Displays the current configuration.




show status Show status state disable Disables GRE tunnel. state enable Enables GRE tunnel. write Stores the current configuration in permanent memory. host 1 (tunnel-connect-host:3:1) level commands address <text> Sets the remote host to establish tunneling connections

with. <text> = IP address or host name of the remote host. aes decrypt key <hexadecimal> Sets the connect tunnel AES decrypt key with up to 16


aes decrypt key text <text> Sets the connect tunnel AES decrypt key with up to 16 bytes. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

aes encrypt key <hexadecimal> Sets the connect tunnel AES encrypt key with up to 16 bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.

aes encrypt key text <text> Sets the connect tunnel AES encrypt key with up to 16 bytes. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

auto show statistics show connection statistics clrscrn Clears the screen. credentials <text> Selects the RSA/DSA certificates by name for the SSL

client. default protocol Restores the default connect mode tunneling protocol as

'TCP'. default tcp keep alive Defaults the TCP keep alive idle time. default tcp keep alive interval Restores the default 45 second connect mode TCP keep

alive timeout. default tcp keep alive probes Defaults the TCP keep alive probes. exit Exits to the next higher level. initial send binary <binary> Sets the host connect tunnel Initial Send text allowing for

binary characters. <binary> = string in binary format that will be sent out the network upon connection. Within [] use binary decimal up to 255 or hex up to 0xFF.

initial send set <text> Sets the host connect tunnel Initial Send text. <text> = ascii string that will be sent out the network upon connec-tion.

no address Removes the remote host address used to establish tun-neling connections.

no aes decrypt key Removes the connect tunnel AES decrypt key. no aes encrypt key Removes the connect tunnel AES encrypt key. no credentials Clears the RSA/DSA certificate selection for the SSL cli-



ent. no initial send Removes the host connect tunnel Initial Send string. no port Removes the remote port used to establish tunnel con-

nections. no ssh username Removes the SSH user name. no tcp user timeout Restores the default. port <number> Sets the remote port to use for connect mode tunneling.

<number> = number of the port to use. protocol ssh Uses SSH protocol for connect mode tunneling. protocol ssl Uses SSL protocol for connect mode tunneling. protocol tcp Uses TCP protocol for connect mode tunneling. protocol tcp aes Uses TCP protocol with AES encryption for connect mode

tunneling. protocol telnet Uses Telnet protocol (with IAC) for connect mode tunnel-

ing. protocol udp Uses UDP protocol for connect mode tunneling. protocol udp aes Uses UDP protocol with AES encryption for connect mode

tunneling. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics show connection statistics ssh username <text> Sets the SSH user name for use when establishing tun-

neling connections with other devices. <text> = SSH user name.

tcp keep alive <milliseconds> Sets the TCP keep alive idle time. This is the initial keep alive timeout. <milliseconds> = timer value, in millisec-onds.

tcp keep alive interval <milliseconds> Enables TCP keep alive for connect mode tunneling and sets the timer. <milliseconds> = TCP keep alive for con-nect mode in milliseconds.


tcp user timeout <milliseconds> Sets the timeout for TCP retransmissions. <milliseconds> = timeout value, in milliseconds.

validate certificate disable Skips verification of the server certificate when connect-ing.

validate certificate enable Requires verification of the server certificate when con-necting.

write Stores the current configuration in permanent memory. host 1 (tunnel-connect-host:2:1) level commands address <text> Sets the remote host to establish tunneling connections



aes decrypt key text <text> Sets the connect tunnel AES decrypt key with up to 16 bytes. Each byte is represented by a single character.



Note that quotes must enclose the value if it contains spaces.















ing. protocol udp Uses UDP protocol for connect mode tunneling.



protocol udp aes Uses UDP protocol with AES encryption for connect mode tunneling.


















'TCP'.



default tcp keep alive Defaults the TCP keep alive idle time. default tcp keep alive interval Restores the default 45 second connect mode TCP keep






















write Stores the current configuration in permanent memory. host 1 (config-host:1) level commands clrscrn Clears the screen. default protocol Restores the default value of the protocol (Telnet). default remote port Sets the remote port (used to connect to the host) to the

default value, which depends on the selected protocol. exit Exits to the configuration level. host <number> Change to config host level name <text> Sets the name of the host. <text> = name of the host. no name Clears the name of the host. no remote address Clears the remote address of the host. no ssh username Clears the SSH username associated with the host. protocol ssh Sets the protocol to SSH. protocol telnet Sets the protocol to Telnet. remote address <text> Sets the IP address of the remote host to connect to when

this host is selected on the login connect menu. <text> = IP address.

remote port <number> Sets the remote port used to connect to the host. <num-ber> = port to be used.


CLI session. ssh username <text> Sets the username for logging into the host via SSH.

<text> = username. write Stores the current configuration in permanent memory. host 10 (tunnel-connect-host:3:10) level commands address <text> Sets the remote host to establish tunneling connections





aes encrypt key text <text> Sets the connect tunnel AES encrypt key with up to 16



bytes. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.
















neling connections with other devices. <text> = SSH user



name. tcp keep alive <milliseconds> Sets the TCP keep alive idle time. This is the initial keep

alive timeout. <milliseconds> = timer value, in millisec-onds.
















binary characters. <binary> = string in binary format that will be sent out the network upon connection. Within [] use



binary decimal up to 255 or hex up to 0xFF. initial send set <text> Sets the host connect tunnel Initial Send text. <text> =

ascii string that will be sent out the network upon connec-tion.

















write Stores the current configuration in permanent memory. host 10 (tunnel-connect-host:1:10) level commands



address <text> Sets the remote host to establish tunneling connections with. <text> = IP address or host name of the remote host.

aes decrypt key <hexadecimal> Sets the connect tunnel AES decrypt key with up to 16 bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.














<number> = number of the port to use.



protocol ssh Uses SSH protocol for connect mode tunneling. protocol ssl Uses SSL protocol for connect mode tunneling. protocol tcp Uses TCP protocol for connect mode tunneling. protocol tcp aes Uses TCP protocol with AES encryption for connect mode


































ent.



no initial send Removes the host connect tunnel Initial Send string. no port Removes the remote port used to establish tunnel con-



































tunneling.



















tcp keep alive <milliseconds> Sets the TCP keep alive idle time. This is the initial keep alive timeout. <milliseconds> = timer value, in millisec-



onds. tcp keep alive interval <milliseconds> Enables TCP keep alive for connect mode tunneling and

sets the timer. <milliseconds> = TCP keep alive for con-nect mode in milliseconds.
















initial send set <text> Sets the host connect tunnel Initial Send text. <text> = ascii string that will be sent out the network upon connec-



tion. no address Removes the remote host address used to establish tun-

neling connections. no aes decrypt key Removes the connect tunnel AES decrypt key. no aes encrypt key Removes the connect tunnel AES encrypt key. no credentials Clears the RSA/DSA certificate selection for the SSL cli-

































<number> = number of the port to use. protocol ssh Uses SSH protocol for connect mode tunneling. protocol ssl Uses SSL protocol for connect mode tunneling.



protocol tcp Uses TCP protocol for connect mode tunneling. protocol tcp aes Uses TCP protocol with AES encryption for connect mode


































ent. no initial send Removes the host connect tunnel Initial Send string.



no port Removes the remote port used to establish tunnel con-nections.

no ssh username Removes the SSH user name. no tcp user timeout Restores the default. port <number> Sets the remote port to use for connect mode tunneling.

















aes encrypt key <hexadecimal> Sets the connect tunnel AES encrypt key with up to 16


















tunneling. show Shows the current configuration.




show statistics show connection statistics ssh username <text> Sets the SSH user name for use when establishing tun-

















alive timeout.



default tcp keep alive probes Defaults the TCP keep alive probes. exit Exits to the next higher level. initial send binary <binary> Sets the host connect tunnel Initial Send text allowing for

































auto show statistics show connection statistics





















bytes. Each byte is represented by two adjacent hex dig-



its. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.














<number> = number of the port to use. protocol ssh Uses SSH protocol for connect mode tunneling. protocol ssl Uses SSL protocol for connect mode tunneling. protocol tcp Uses TCP protocol for connect mode tunneling.



protocol tcp aes Uses TCP protocol with AES encryption for connect mode tunneling.

protocol telnet Uses Telnet protocol (with IAC) for connect mode tunnel-ing.

protocol udp Uses UDP protocol for connect mode tunneling. protocol udp aes Uses UDP protocol with AES encryption for connect mode















CLI session.



ssh username <text> Sets the username for logging into the host via SSH. <text> = username.
















nections.




















aes encrypt key <hexadecimal> Sets the connect tunnel AES encrypt key with up to 16 bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional



punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the value if it con-tains spaces.



































alive timeout. default tcp keep alive probes Defaults the TCP keep alive probes.



exit Exits to the next higher level. initial send binary <binary> Sets the host connect tunnel Initial Send text allowing for


















validate certificate enable Requires verification of the server certificate when con-



necting. write Stores the current configuration in permanent memory. host 15 (config-host:15) level commands clrscrn Clears the screen. default protocol Restores the default value of the protocol (Telnet). default remote port Sets the remote port (used to connect to the host) to the












auto show statistics show connection statistics clrscrn Clears the screen.



credentials <text> Selects the RSA/DSA certificates by name for the SSL client.

default protocol Restores the default connect mode tunneling protocol as 'TCP'.
















tcp keep alive interval <milliseconds> Enables TCP keep alive for connect mode tunneling and




















no address Removes the remote host address used to establish tun-




















bytes. Each byte is represented by two adjacent hex dig-its. Bytes may run together or be separated by optional



<text> = username. write Stores the current configuration in permanent memory. host 17 (config-host:17) level commands clrscrn Clears the screen. default protocol Restores the default value of the protocol (Telnet). default remote port Sets the remote port (used to connect to the host) to the





























nections.



<text> = username. write Stores the current configuration in permanent memory. http (config-http) level commands auth <uri> Creates a new HTTP server authentication directive. <uri>

= URI of the server. auth type <uri> digest Sets an HTTP server authentication directive to the Digest

Access Authentication scheme. <uri> = URI of the server. auth type <uri> none Sets the authentication type for an HTTP server authenti-

cation directive to none. <uri> = URI of the server. authentication timeout <minutes> For any Digest AuthType, sets the timeout for authentica-

tion. <minutes> = authentication timeout value. clear counters Sets the HTTP counters to zero. clear log Clears the HTTP server log. clrscrn Clears the screen. default authentication timeout Resets the authentication timeout to its default value. default log format Restores the HTTP Server log format string to its default

value. default max bytes Resets the maximum bytes to its default value. default max log entries Restores the default maximum number of HTTP Server

log entries. default max timeout Resets the timeout to its default value. default port Resets the HTTP Server port to its default value. default secure port Resets the HTTP Server SSL port to its default value. default secure protocols Restores the default secure protocol selections. delete auth <uri> Deletes an existing HTTP Server authentication directive.

<uri> = URI of the server. exit Returns to the config level. https state disable Disables the HTTPS server. https state enable Enables the HTTPS server. log format <text> Sets the log format string for the HTTP server, using the

following directives: %a remote ip address (could be a proxy) %b bytes sent excluding headers %B bytes sent excluding headers (0 = '-') %h remote host (same as %a) %{h}i header contents from request (h = header string) %m request method %p ephemeral local port value used for request %q query string (prepend with '?' or empty '-') %t timestamp HH:MM:SS (same as Apache '%(%H:%M:%S)t') %u remote user (could be bogus for 401 status) %U URL path info %r first line of request (same as '%m %U%q <version>') %s return status

logging state disable Disables HTTP server logging. logging state enable Enables HTTP server logging. max bytes <number> Sets the maximum number of bytes the HTTP server ac-

cepts when receiving a request. max log entries <number> Sets the maximum number of HTTP server log entries.

<number> = maximum number of HTTP server log en-tries.

max timeout <seconds> Sets the maximum time the HTTP server waits when re-ceiving a request. <seconds> = maximum timeout value.

no clear counters Restores the HTTP counters to the aggregate values.



no port Disables the HTTP Server port. no secure credentials Clears the RSA/DSA certificate selection for the HTTP

server. no secure port Disables the HTTP Server SSL port. port <number> Sets the port number the HTTP server will use. <number>

= port number. secure credentials <text> Selects the RSA/DSA certificates by name for the HTTP

server. secure port <number> Sets the port number the HTTP server will use over SSL.

<number> = port number. secure protocols ssl3 disable Disables the protocol. secure protocols ssl3 enable Enables the protocol. secure protocols tls1.0 disable Disables the protocol. secure protocols tls1.0 enable Enables the protocol. secure protocols tls1.1 disable Disables the protocol. secure protocols tls1.1 enable Enables the protocol. secure protocols tls1.2 disable Disables the protocol. secure protocols tls1.2 enable Enables the protocol. show Displays the current configuration. show auth Displays the HTTP server authentication settings. show history Displays the last 20 commands entered during the current

CLI session. show log Displays the HTTP server log. show statistics Displays the HTTP statistics. state disable Disables the HTTP server. state enable Enables the HTTP server. write Stores the current configuration in permanent memory. http post (config-action-http_post:wlan0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the



tions. no reminder interval Clears the HTTP Post reminder interval. HTTP Post is

sent once only. reminder interval <minutes> Sets the HTTP Post reminder interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. http post (config-action-http_post:usb0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the

next lower level.



default mode Sets default of simultaneous connection mode. exit Exits to the next higher level. mode sequential Sets sequential mode; will stop after first connection that




CLI session. write Stores the current configuration in permanent memory. http post (config-action-http_post:on scheduled reboot) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the





CLI session. write Stores the current configuration in permanent memory. http post (config-action-http_post:eth0 link state change) level commands clrscrn Clears the screen. connection <instance> Enters the next lower level. Specify the instance for the





CLI session. write Stores the current configuration in permanent memory. icmp (config-icmp) level commands



clrscrn Clears the screen. exit Exits to the configuration level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Prevents ICMP packets from being sent or received. state enable Allows ICMP packets to be sent and received. write Stores the current configuration in permanent memory. if 1 (config-if:eth0) level commands clrscrn Clears the screen. default gateway <IP address> Sets the configurable gateway IP address to the default

value. default mtu Restores the default Maximum Transmission Unit (MTU)

size. default priority Restores the default priority for the interface. dhcp client id <text> Sets the DHCP client ID. dhcp disable Disables DHCP. dhcp enable Enables DHCP. dhcp renew Force DHCP to renew domain <text> Sets the domain name. <text> = name of the domain. exit Exits to the config level. failover Enter failover configuration level hostname <text> Sets the host name. <text> = name of the host. if <instance> Changes to the interface configuration level. ip address <ip address/cidr> Sets the IP address and network mask. Formats accept-

ed: 192.168.1.1 (default mask) 192.168.1.1/24 (CIDR) "192.168.1.1 255.255.255.0" (explicit mask)

ipv4 state disable Disables IPv4 for the interface. ipv4 state enable Enables IPv4 for the interface. ipv6 address <ipv6 address/prefix> Sets the IPv6 static address. IPv6 addresses are written

in eight groups of four hexadecimal digits separated by colons, such as 2001:0db8:85a3:0000:0000:8a2e:0370:7334 Network address ranges are written in CIDR notation. A network is denoted by the first address in the block (ending in all zeroes), a slash (/), and a decimal value equal to the size in bits of the prefix

ipv6 auto configure enable Enables IPv6 stateless address autoconfiguration. ipv6 default gateway <ipv6 address> Sets the IPv6 default gateway. IPv6 addresses are written


ipv6 dhcp enable Enables IPv6 DHCP. ipv6 domain <text> Sets the IPv6 domain name. <text> = name of the do-

main. ipv6 primary dns <ipv6 address> Sets the IPv6 address of the primary DNS server. IPv6




ipv6 state enable Enables IPv6 for the interface. link Enter link configuration level mtu <bytes> Sets the Maximum Transmission Unit (MTU) size. no default gateway Clears the default gateway. no dhcp client id Clears the DHCP client ID. no domain Clears the domain name. no hostname Clears the host name. no ip address Clears the IP address. no ipv6 address Clears the IPv6 static address. no ipv6 default gateway Clears the IPv6 default gateway. no ipv6 domain Clears the IPv6 domain name. no ipv6 primary dns Clears the IPv6 address of the primary DNS server. no ipv6 secondary dns Clears the IPv6 address of the secondary DNS server. no primary dns Clears the name of the primary DNS server. no secondary dns Clears the name of the secondary DNS server. primary dns <IP address> Sets the IP address of the primary DNS server. priority <number> Sets the priority for interface. <number> = priority number. qos Enter QoS configuration level secondary dns <IP address> Sets the IP address of the secondary DNS server. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Show interface status state disable Disables the interface. state enable Enables the interface. write Stores the current configuration in permanent memory. if 2 (config-if:wlan0) level commands clrscrn Clears the screen. default gateway <IP address> Sets the configurable gateway IP address to the default


size. default priority Restores the default priority for the interface. dhcp client id <text> Sets the DHCP client ID. dhcp disable Disables DHCP. dhcp enable Enables DHCP. dhcp renew Force DHCP to renew domain <text> Sets the domain name. <text> = name of the domain. exit Exits to the config level. failover Enter failover configuration level



hostname <text> Sets the host name. <text> = name of the host. if <instance> Changes to the interface configuration level. ip address <ip address/cidr> Sets the IP address and network mask. Formats accept-









ipv6 state enable Enables IPv6 for the interface. link Enter link configuration level mtu <bytes> Sets the Maximum Transmission Unit (MTU) size. no default gateway Clears the default gateway. no dhcp client id Clears the DHCP client ID. no domain Clears the domain name. no hostname Clears the host name. no ip address Clears the IP address. no ipv6 address Clears the IPv6 static address. no ipv6 default gateway Clears the IPv6 default gateway. no ipv6 domain Clears the IPv6 domain name. no ipv6 primary dns Clears the IPv6 address of the primary DNS server. no ipv6 secondary dns Clears the IPv6 address of the secondary DNS server. no primary dns Clears the name of the primary DNS server. no secondary dns Clears the name of the secondary DNS server. primary dns <IP address> Sets the IP address of the primary DNS server.



priority <number> Sets the priority for interface. <number> = priority number. qos Enter QoS configuration level secondary dns <IP address> Sets the IP address of the secondary DNS server. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Show interface status state disable Disables the interface. state enable Enables the interface. write Stores the current configuration in permanent memory. if 3 (config-if:usb0) level commands clrscrn Clears the screen. default gateway <IP address> Sets the configurable gateway IP address to the default


size. default priority Restores the default priority for the interface. dhcp client id <text> Sets the DHCP client ID. dhcp disable Disables DHCP. dhcp enable Enables DHCP. dhcp renew Force DHCP to renew domain <text> Sets the domain name. <text> = name of the domain. exit Exits to the config level. failover Enter failover configuration level hostname <text> Sets the host name. <text> = name of the host. if <instance> Changes to the interface configuration level. ip address <ip address/cidr> Sets the IP address and network mask. Formats accept-











ipv6 state enable Enables IPv6 for the interface. link Enter link configuration level mtu <bytes> Sets the Maximum Transmission Unit (MTU) size. no default gateway Clears the default gateway. no dhcp client id Clears the DHCP client ID. no domain Clears the domain name. no hostname Clears the host name. no ip address Clears the IP address. no ipv6 address Clears the IPv6 static address. no ipv6 default gateway Clears the IPv6 default gateway. no ipv6 domain Clears the IPv6 domain name. no ipv6 primary dns Clears the IPv6 address of the primary DNS server. no ipv6 secondary dns Clears the IPv6 address of the secondary DNS server. no primary dns Clears the name of the primary DNS server. no secondary dns Clears the name of the secondary DNS server. primary dns <IP address> Sets the IP address of the primary DNS server. priority <number> Sets the priority for interface. <number> = priority number. qos Enter QoS configuration level secondary dns <IP address> Sets the IP address of the secondary DNS server. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Show interface status state disable Disables the interface. state enable Enables the interface. write Stores the current configuration in permanent memory. ip (config-ip) level commands clrscrn Clears the screen. default ip time to live Restores the default IP time to live. default multicast time to live Restores the default IP multicast time to live, which is one

hop. exit Exits to the configuration level. ip time to live <hops> Sets the IP time to live, known by SNMP as

'ipDefaultTTL'. <hops> = number of hops that a typical IP packet is allowed to live.

multicast time to live <hops> Sets the IP multicast time to live. <hops> = number of hops that a multicast IP packet is allowed to live.




CLI session. write Stores the current configuration in permanent memory. key 1 (config-profile-security-wep-key:default_infra2:1) level commands apply wlan Try out WLAN settings without saving them to Flash. If the


clrscrn Clears the screen. exit Exits to the next higher level. key <hexadecimal> Sets WEP key. Each byte is represented by two adjacent

hex digits. Bytes may run together or be separated by optional punctuation: 123ABC "12 3A BC" 12,3A,BC 12.3a.bc 12:3a:bc Note that quotes must enclose the val-ue if it contains spaces.

key text <text> Sets WEP key. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

no key Removes WEP key. show Shows the current configuration. show history Displays the last 20 commands entered during the current





















CLI session. write Stores the current configuration in permanent memory. line 1 (line:1) level commands auto show statistics Continuously displays line statistics. baud rate <bits per second> Sets the line speed. <bits per second> = the speed.

Standard speeds include 1200, 2400, 4800, 9600, 19200, and so on.

clear line counters Sets the serial counters to zero. clrscrn Clears the screen. command mode always Sets the current line to always be in command mode. command mode echo serial string disable Disables user-defined serial boot string to be echoed in

the CLI. command mode echo serial string enable Enables user-defined serial boot string to be echoed in

the CLI. command mode serial string Enables user to enter a custom string at boot time to enter

command mode. command mode serial string <string> Sets a string that can be entered at boot time to enter

command mode. <string> = text with possible binary characters. Within [] use binary decimal up to 255 or hex up to 0xFF. Within {} specify decimal milliseconds time delay.

command mode signon message <string> Sets a sign-on message that is sent from the serial port when the device boots and when the line is in command mode. <string> = text with possible binary characters. Within [] use binary decimal up to 255 or hex up to 0xFF.

command mode wait time <milliseconds> Sets boot-up wait time for command mode serial string. <milliseconds> = wait time.



configure current settings Configures line with the current value of settings. data bits 7 Uses seven bits for data on the line. data bits 8 Uses eight bits for data on the line. default baud rate Restores the default speed of 9600 bits per second. default data bits Restores the default of eight data bits. default flow control Restores the default of no flow control. default full duplex termination Restores the default termination on this line. default parity Restores the default of no parity. default stop bits Restores the default of one stop bit. default threshold Restores the factory default threshold. default xoff char Restores the default xoff character on this line. default xon char Restores the default xon character on this line. exit Exits to the enable level flow control hardware Uses hardware (RTS/CTS) flow control on the line. flow control none Does not provide flow control on the line. flow control software Uses software (xon/xoff characters) flow control on the

line. full duplex termination disabled Disables line termination. full duplex termination termination on rx Sets line termination on Rx only. full duplex termination termination on tx Sets line termination on Tx only. full duplex termination termination on tx and rx Sets line termination on Tx and Rx. gap timer <milliseconds> Sets the gap timer in milliseconds. If some data has been

received, it will be forwarded after this time since the last character.

interface rs232 Sets the line interface to RS232. interface rs485 full-duplex Sets the line interface to RS485 in full-duplex mode. interface rs485 half-duplex Sets the line interface to RS485 in half-duplex mode. kill session Kills command mode session on the Line line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. name <text> Sets the name for this line. no clear line counters Restores the serial counters to the aggregate values. no command mode Disables command mode for the current line. no command mode signon message Clears the signon message displayed at boot time and

when entering command mode. no gap timer Removes the gap timer, so forwarding depends on the

line speed. no name Removes the name of this line. parity even Uses a parity bit on the line for even parity. parity none Does not use a parity bit on the line. parity odd Uses a parity bit on the line for odd parity. protocol modbus ascii Applies Modbus ASCII protocol on the line. protocol modbus rtu Applies Modbus RTU protocol on the line. protocol none Uses no protocol on the line. protocol tunnel Applies tunnel protocol on the line. reassert Asserts line status with current configured values.



show Displays the current status. show command mode Shows the command mode settings for the current line. show history Displays the last 20 commands entered during the current

CLI session. show line Displays the current configuration. show statistics Shows the line statistics. state disable Disables the line so data cannot be sent/received. state enable Enables the line so data can be sent/received. stop bits 1 Uses one stop bit after data on the line. stop bits 2 Uses two stop bits after data on the line. terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. termination disable Refrains from terminating the line. termination enable Enables 120 ohm line termination in RS485 half-duplex

mode. threshold <bytes> Sets the threshold in bytes. After this many bytes are re-

ceived, they are forwarded without delay. tunnel <line> Enters the tunnel level. <line> = number of the tunnel line


to be configured. write Stores the current configuration in permanent memory. xoff char <control> Sets the xoff character for use with software flow control

on this line. The character may be input as text, control, decimal, or hex. A control character has the form <con-trol>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

xon char <control> Sets the xon character for use with software flow control on this line. The character may be input as text, control, decimal, or hex. A control character has the form <con-trol>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

line 1 (config-mach10-line:1) level commands clrscrn Clears the screen. command delimiter <text> Sets the command delimiter. content check interval <hours> Sets the firmware and configuration check interval. default command delimiter Restores the command delimiter. default content check interval Restores the default firmware and configuration check

interval. default local port Clears the local port for Mach10 client. default status update interval Restores the default status update interval. exit Exits to the config-mach10 level. line <number> Change to line configuration level. local port <number> Sets the local port for Mach10 client. When configured, a

total of 16 consecutive ports will be reserved. no project tag Restores the default Project Tag. project tag <text> Sets the Project Tag. show Displays the current configuration.




state disable Disables command processing on line. state enable Enables command processing on line. status update interval <minutes> Sets the status update interval. write Stores the current configuration in permanent memory. line 2 (line:2) level commands auto show statistics Continuously displays line statistics. baud rate <bits per second> Sets the line speed. <bits per second> = the speed.

Standard speeds include 1200, 2400, 4800, 9600, 19200, and so on.

clear line counters Sets the serial counters to zero. clrscrn Clears the screen. command mode always Sets the current line to always be in command mode. command mode echo serial string disable Disables user-defined serial boot string to be echoed in







configure current settings Configures line with the current value of settings. data bits 7 Uses seven bits for data on the line. data bits 8 Uses eight bits for data on the line. default baud rate Restores the default speed of 9600 bits per second. default data bits Restores the default of eight data bits. default flow control Restores the default of no flow control. default full duplex termination Restores the default termination on this line. default parity Restores the default of no parity. default stop bits Restores the default of one stop bit. default threshold Restores the factory default threshold. default xoff char Restores the default xoff character on this line. default xon char Restores the default xon character on this line. exit Exits to the enable level flow control hardware Uses hardware (RTS/CTS) flow control on the line. flow control none Does not provide flow control on the line. flow control software Uses software (xon/xoff characters) flow control on the

line. full duplex termination disabled Disables line termination.



full duplex termination termination on rx Sets line termination on Rx only. full duplex termination termination on tx Sets line termination on Tx only. full duplex termination termination on tx and rx Sets line termination on Tx and Rx. gap timer <milliseconds> Sets the gap timer in milliseconds. If some data has been


interface rs232 Sets the line interface to RS232. interface rs485 full-duplex Sets the line interface to RS485 in full-duplex mode. interface rs485 half-duplex Sets the line interface to RS485 in half-duplex mode. kill session Kills command mode session on the Line line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. name <text> Sets the name for this line. no clear line counters Restores the serial counters to the aggregate values. no command mode Disables command mode for the current line. no command mode signon message Clears the signon message displayed at boot time and


line speed. no name Removes the name of this line. parity even Uses a parity bit on the line for even parity. parity none Does not use a parity bit on the line. parity odd Uses a parity bit on the line for odd parity. protocol modbus ascii Applies Modbus ASCII protocol on the line. protocol modbus rtu Applies Modbus RTU protocol on the line. protocol none Uses no protocol on the line. protocol tunnel Applies tunnel protocol on the line. reassert Asserts line status with current configured values. show Displays the current status. show command mode Shows the command mode settings for the current line. show history Displays the last 20 commands entered during the current

CLI session. show line Displays the current configuration. show statistics Shows the line statistics. state disable Disables the line so data cannot be sent/received. state enable Enables the line so data can be sent/received. stop bits 1 Uses one stop bit after data on the line. stop bits 2 Uses two stop bits after data on the line. terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. termination disable Refrains from terminating the line. termination enable Enables 120 ohm line termination in RS485 half-duplex

mode. threshold <bytes> Sets the threshold in bytes. After this many bytes are re-





to be configured. write Stores the current configuration in permanent memory. xoff char <control> Sets the xoff character for use with software flow control

on this line. The character may be input as text, control, decimal, or hex. A control character has the form <con-trol>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

xon char <control> Sets the xon character for use with software flow control on this line. The character may be input as text, control, decimal, or hex. A control character has the form <con-trol>C. A decimal value character has the form \99. A hex value character has the form 0xFF.

line 2 (config-mach10-line:2) level commands clrscrn Clears the screen. command delimiter <text> Sets the command delimiter. content check interval <hours> Sets the firmware and configuration check interval. default command delimiter Restores the command delimiter. default content check interval Restores the default firmware and configuration check


total of 16 consecutive ports will be reserved. no project tag Restores the default Project Tag. project tag <text> Sets the Project Tag. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables command processing on line. state enable Enables command processing on line. status update interval <minutes> Sets the status update interval. write Stores the current configuration in permanent memory. line 3 (config-mach10-line:3) level commands clrscrn Clears the screen. command delimiter <text> Sets the command delimiter. content check interval <hours> Sets the firmware and configuration check interval. default command delimiter Restores the command delimiter. default content check interval Restores the default firmware and configuration check




total of 16 consecutive ports will be reserved. no project tag Restores the default Project Tag. project tag <text> Sets the Project Tag. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables command processing on line. state enable Enables command processing on line. status update interval <minutes> Sets the status update interval. write Stores the current configuration in permanent memory. link (config-wlan:wlan0) level commands antenna diversity antenna 1 Set antenna selection to 1 antenna diversity antenna 2 Set antenna selection to 2 antenna diversity enabled Set antenna diversity to enabled. apply wlan Try out WLAN settings without saving them to Flash. If the


band 2.4 ghz only Sets the radio band to 2.4 GHz only. band 5 ghz only Sets the radio band to 5 GHz only. band auto Sets the radio band to Auto. cancel wps Cancels wi-fi protected setup operation. choice <instance> Enters the next lower level. Specify the instance for the

next lower level. clrscrn Clears the screen. debugging level debug Sets the WLAN debugging level to Debug. debugging level dump Sets the WLAN debugging level to Dump, the most ver-

bose option. debugging level error Sets the WLAN debugging level to Error, which shows

only errors. debugging level info Sets the WLAN debugging level to Info. debugging level warning Sets the WLAN debugging level to Warning. default antenna diversity Restore the default value for antenna diversity. default band Restores the radio band to the default value (Auto). default debugging level Sets the WLAN debugging level to its default value, Info. default scanning latency Restores scanning latency to the default value (Standard). exit Exit back to interface configuration level no scanning channel list Clears the scanning channel list. scan <ssid> Scan the radio environment for networks. scanning channel list <text> Sets the scanning channel list. scanning latency enhanced throughput Sets scanning latency to Enhanced Throughput. scanning latency standard Sets scanning latency to Standard. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show wps information Show the configuration received by wi-fi protected setup. show wps information with secrets Show the configuration received by wi-fi protected setup

with secrets.



show wps status Show status of WPS operation. start wps Starts wi-fi protected setup operation. start wps pin Starts wi-fi protected setup operation. status Show link status wifi direct go mode disable Disables WiFi Direct Group Owner Mode. wifi direct go mode enable Enables WiFi Direct Group Owner Mode. write Stores the current configuration in permanent memory. link (config-ethernet:eth0) level commands clrscrn Clears the screen. default duplex Restores the default duplex setting, which is auto. default speed Restores the default speed setting, which is auto-

negotiate. duplex auto Sets duplex mode to auto. duplex full Sets duplex mode to full. duplex half Sets duplex mode to half. exit Exit back to interface configuration level show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. speed 10 Sets the speed of the Ethernet link to 10 Mbps. speed 100 Sets the speed of the Ethernet link to 100 Mbps. speed auto Sets the speed of the Ethernet link to auto-negotiate. write Stores the current configuration in permanent memory. log (config-diagnostics-log) level commands clrscrn Clears the screen. default max length Restores the factory default maximum Log file size. default output Restores the default log output, which is disable. exit Exits to the next higher level. max length <Kbytes> Sets the maximum size in Kbytes for the Log file. output disable Disables log output. output filesystem Enables log to filesystem. output line <number> Enables log to serial line. output usb <number> Enables log to usb line. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. mac address filter 1 (config-mac_filter:1) level commands action accept Sets the action to ACCEPT. action drop Sets the action to DROP. clrscrn Clears the screen. default action Restores the default value of action (ACCEPT). exit Exits to the config-gateway level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by





mac address filter <number> Change to config mac filter level. no mac address Removes the filter MAC Address. show Displays the current configuration. show history Displays the last 20 commands entered during the current







CLI session. write Stores the current configuration in permanent memory. mac address filter 4 (config-mac_filter:4) level commands action accept Sets the action to ACCEPT. action drop Sets the action to DROP. clrscrn Clears the screen. default action Restores the default value of action (ACCEPT). exit Exits to the config-gateway level.











CLI session. write Stores the current configuration in permanent memory. mac address filter 7 (config-mac_filter:7) level commands action accept Sets the action to ACCEPT. action drop Sets the action to DROP. clrscrn Clears the screen.



default action Restores the default value of action (ACCEPT). exit Exits to the config-gateway level. mac address <hexadecimal> Sets the filter MAC Address. Each byte is represented by






CLI session. write Stores the current configuration in permanent memory. mach10 (config-mach10) level commands apply configuration updates always Sets the action on configuration updates to Always, signi-

fying that the device will always apply configuration up-dates.

apply configuration updates if unchanged Sets the action on configuration updates to If unchanged, signifying that the device will only apply configuration up-dates if no changes have been made locally.

apply configuration updates never Sets the action on configuration updates to Never, signify-ing no configuration updates will be applied.

apply firmware updates disable Restores the default action on new firmware (do not ap-ply).

apply firmware updates enable Automatically apply new firmware. clrscrn Clears the screen. content check interval <hours> Sets the firmware and configuration check interval. default apply configuration updates Restores the default setting for configuration updates

(Never). default content check interval Restores the default firmware and configuration check

interval. default host Restores the Hostname or IP address of Mach 10. default local port Clears the local port for Mach10 client.



default mqtt host Restores the Hostname or IP address of MQTT server. default mqtt local port Clears the local port for Mach10 MQTT client. default mqtt port Restores the Port of MQTT server. default port Restores the Port of Mach 10. default status update interval Restores the default status update interval. device description <text> Sets the Device Description. device id <text> Sets the Device ID. device key <text> Sets the Device Key. device name <text> Sets the Device Name. exit Returns to the config level. host <text> Sets the Hostname or IP address of Mach 10. line <number> Change to line configuration level. local port <number> Sets the local port for Mach10 client. When configured, a

total of 16 consecutive ports will be reserved. mqtt host <text> Sets the Hostname or IP address of MQTT server. mqtt local port <number> Sets the local port for Mach10 MQTT client. When config-

ured, a total of 32 consecutive ports will be reserved. mqtt port <number> Sets the Port of MQTT server. mqtt security disable Disables SSL for MQTT. mqtt security enable Enables SSL for MQTT. mqtt state disable Disables MQTT. mqtt state enable Enables MQTT. no device description Removes the Device Description. no device id Removes the Device ID. no device key Removes the Device Key. no device name Removes the Device Name. port <number> Sets the Port of Mach 10. reboot after update disable Restores the default action when new configuration is

applied (do not reboot) NOTE: The device will always reboot after a firmware update.

reboot after update enable Enables automatic reboot when new configuration is ap-plied.

secure port disable Disables https for Mach10 client. secure port enable Enables https for Mach10 client. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays the MACH10 statistics. state disable Disables the Mach10 client. state enable Enables the Mach10 client. status update interval <minutes> Sets the status update interval. validate certificates disable Disables certificate validation for Mach10 client. validate certificates enable Enables certificate validation for Mach10 client. write Stores the current configuration in permanent memory. mass storage (filesystem-mass_storage) level commands clrscrn Clears the screen.



exit Exits to the next higher level. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. usb auto mount disable Disables automatic mount of connected USB drives. usb auto mount enable Enables automatic mount of connected USB drives. write Stores the current configuration in permanent memory. modbus (modbus) level commands additional port <number> Sets an additional TCP server port. clrscrn Clears the screen. default response timeout Restores the default Modbus Response Timeout. exit Exits to the config level. kill connection <index> Kills modbus connection selected by index from show

connections. no additional port Removes the additional TCP server port. response timeout <milliseconds> Sets the Modbus Response Timeout in milliseconds. rss Enters the next lower level. show Displays the current configuration. show connections Displays connections. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays statistics. tcp server state disable Disables the Modbus TCP Server. tcp server state enable Enables the Modbus TCP Server. write Stores the current configuration in permanent memory. modem (tunnel-modem:3) level commands clrscrn Clears the screen. connect string <text> Sets the CONNECT string used in modem emulation.

<string> = connect string. default incoming connection Default disables incoming network connections. default response type Default uses text type responses. display remote ip disable The incoming RING has nothing following it. display remote ip enable The incoming RING is followed by the IP address of the

caller. echo commands disable Does not echo modem commands. echo commands enable Echoes modem commands. echo pluses disable Does not echo the +++ characters when entering modem

command mode. echo pluses enable Echoes the +++ characters when entering modem com-

mand mode. error unknown commands disable Returns OK on unknown AT commands. error unknown commands enable Returns an error upon unknown AT commands. exit Returns to the tunnel level. incoming connection automatic Automatically answer incoming network connections. incoming connection disabled Disable incoming network connections. incoming connection manual Wait for an ATA command before answering an incoming

network connection.



no connect string Removes optional CONNECT string information for mo-dem emulation.

reassert Asserts tunnel modem status with current configured val-ues.

response type numeric Uses numeric type responses. response type text Uses text type responses. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays tunnel modem status. verbose response disable Does not send Modem Response Codes. verbose response enable Sends Modem Response Codes out on the Serial Line. write Stores the current configuration in permanent memory. modem (tunnel-modem:2) level commands clrscrn Clears the screen. connect string <text> Sets the CONNECT string used in modem emulation.





network connection. no connect string Removes optional CONNECT string information for mo-

dem emulation. reassert Asserts tunnel modem status with current configured val-

ues. response type numeric Uses numeric type responses. response type text Uses text type responses. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays tunnel modem status. verbose response disable Does not send Modem Response Codes. verbose response enable Sends Modem Response Codes out on the Serial Line. write Stores the current configuration in permanent memory.



modem (tunnel-modem:1) level commands clrscrn Clears the screen. connect string <text> Sets the CONNECT string used in modem emulation.





network connection. no connect string Removes optional CONNECT string information for mo-

dem emulation. reassert Asserts tunnel modem status with current configured val-

ues. response type numeric Uses numeric type responses. response type text Uses text type responses. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays tunnel modem status. verbose response disable Does not send Modem Response Codes. verbose response enable Sends Modem Response Codes out on the Serial Line. write Stores the current configuration in permanent memory. ntp (config-clock-ntp) level commands clrscrn Clears the screen. default server Restores the default NTP server address. exit Exits to the next higher level. server <text> Sets the NTP server address. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. on scheduled reboot (config-action:on scheduled reboot) level commands clrscrn Clears the screen. default delay Resets alarm processing delay to its default value.



delay <seconds> Sets the delay in processing the alarm. Alarm actions will not be executed if the cause is corrected within this time.

email Enters the next lower level. exit Exits to the config alarm level. ftp put Enters the next lower level. http post Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays statistics. snmp trap Enters the next lower level. write Stores the current configuration in permanent memory. packing (tunnel-packing:3) level commands clrscrn Clears the screen. default packing mode Sets to default packing mode, which is 'Disable' default send character Removes the send character for packing mode. default threshold Restores the default threshold. default timeout Restores the default packing mode timeout. exit Returns to the tunnel level. no trailing character Removes the trailing character for packing mode. packing mode disable Disables packing. Data is sent to the network when re-

ceived. packing mode send character Sets packing mode to accumulate data and transmit it

upon receiving the configured send character on the line (serial port).

packing mode timeout Sets packing mode to accumulate data and transmit it after a specified amount of time (timeout).

send character <control> Sets the send character for packing mode. The character may be input as text, control, decimal, or hex. A control character has the form <control>C. A decimal value char-acter has the form \99. A hex value character has the form 0xFF.


CLI session. threshold <bytes> Sets the threshold (byte count). If the queued data reach-

es this threshold then the data will be sent. <bytes> = number of bytes in the threshold.

timeout <milliseconds> Sets the timeout value for packing mode in milliseconds. <milliseconds> = timeout value, in milliseconds.

trailing character <control> Sets the trailing character for packing mode. The charac-ter may be input as text, control, decimal, or hex. A control character has the form <control>C. A decimal value char-acter has the form \99. A hex value character has the form 0xFF.

write Stores the current configuration in permanent memory. packing (tunnel-packing:2) level commands clrscrn Clears the screen. default packing mode Sets to default packing mode, which is 'Disable' default send character Removes the send character for packing mode.



default threshold Restores the default threshold. default timeout Restores the default packing mode timeout. exit Returns to the tunnel level. no trailing character Removes the trailing character for packing mode. packing mode disable Disables packing. Data is sent to the network when re-






CLI session. threshold <bytes> Sets the threshold (byte count). If the queued data reach-

es this threshold then the data will be sent. <bytes> = number of bytes in the threshold.



write Stores the current configuration in permanent memory. packing (tunnel-packing:1) level commands clrscrn Clears the screen. default packing mode Sets to default packing mode, which is 'Disable' default send character Removes the send character for packing mode. default threshold Restores the default threshold. default timeout Restores the default packing mode timeout. exit Returns to the tunnel level. no trailing character Removes the trailing character for packing mode. packing mode disable Disables packing. Data is sent to the network when re-





show Displays the current configuration.




threshold <bytes> Sets the threshold (byte count). If the queued data reach-es this threshold then the data will be sent. <bytes> = number of bytes in the threshold.



write Stores the current configuration in permanent memory. password (tunnel-accept-password:3) level commands clrscrn Clears the screen. exit Exits to the next higher level. no password Removes the password so connections will be accepted

unchallenged. password <text> Sets the password required on the network side of the

tunnel to begin a connection. prompt disable Inhibits any prompting for password on the network side

of the tunnel. prompt enable Sets up so a user on the network side of the tunnel will be

prompted for a password. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. password (tunnel-accept-password:2) level commands clrscrn Clears the screen. exit Exits to the next higher level. no password Removes the password so connections will be accepted


tunnel to begin a connection. prompt disable Inhibits any prompting for password on the network side

of the tunnel. prompt enable Sets up so a user on the network side of the tunnel will be

prompted for a password. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. password (tunnel-accept-password:1) level commands clrscrn Clears the screen. exit Exits to the next higher level. no password Removes the password so connections will be accepted


tunnel to begin a connection.



prompt disable Inhibits any prompting for password on the network side of the tunnel.

prompt enable Sets up so a user on the network side of the tunnel will be prompted for a password.


CLI session. write Stores the current configuration in permanent memory. port forwarding rule 1 (config-portforwarding:1) level commands clrscrn Clears the screen. default protocol Restores the default value of the protocol (Both). exit Exits to the config-gateway level. friendly name <text> Set the friendly name for port forwarding rule <text> =

friendly name ingress ip address <text> Sets the original WAN destination IP address for port for-

warding rule. ip address <text> Sets the LAN destination IP address for port forwarding

rule. no friendly name Remove the friendly name. no ingress ip address Clears the original WAN destination IP address for port

forwarding rule. no ip address Clears the LAN destination IP address for port forwarding

rule. no port or range Clears the WAN port or range for port forwarding rule. no target port Clears the LAN destination port for port forwarding rule. port forwarding rule <number> Change to config gateway port forwarding level. port or range <text> Sets the WAN port or range for port forwarding rule.

<text> = port or range. protocol both Sets the protocol to Both (TCP and UDP). protocol tcp Sets the protocol to TCP. protocol udp Sets the protocol to UDP. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables the port forwarding rule. state enable Enables the port forwarding rule. target port <text> Sets the LAN destination port for port forwarding rule.

<text> = port. write Stores the current configuration in permanent memory. port forwarding rule 2 (config-portforwarding:2) level commands clrscrn Clears the screen. default protocol Restores the default value of the protocol (Both). exit Exits to the config-gateway level. friendly name <text> Set the friendly name for port forwarding rule <text> =

















CLI session.



state disable Disables the port forwarding rule. state enable Enables the port forwarding rule. target port <text> Sets the LAN destination port for port forwarding rule.




























rule.



no port or range Clears the WAN port or range for port forwarding rule. no target port Clears the LAN destination port for port forwarding rule. port forwarding rule <number> Change to config gateway port forwarding level. port or range <text> Sets the WAN port or range for port forwarding rule.



<text> = port. write Stores the current configuration in permanent memory. python 1 (config-applications-python:1) level commands clrscrn Clears the screen. exit Exits to the next higher level. filename <text> Sets the script path. no filename Clear the script path. no output Clear the script output path. no parameters Clear the script parameters. onshutdown disable Do not run the script on shutdown. onshutdown enable Run the script on shutdown. onstart disable Do not run the script on startup. onstart enable Run the script on startup. output <text> Sets the script output path. parameters <text> Sets the script parameters. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables script. state enable Enables script. write Stores the current configuration in permanent memory. python 2 (config-applications-python:2) level commands clrscrn Clears the screen. exit Exits to the next higher level. filename <text> Sets the script path. no filename Clear the script path. no output Clear the script output path. no parameters Clear the script parameters. onshutdown disable Do not run the script on shutdown. onshutdown enable Run the script on shutdown. onstart disable Do not run the script on startup. onstart enable Run the script on startup.



output <text> Sets the script output path. parameters <text> Sets the script parameters. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables script. state enable Enables script. write Stores the current configuration in permanent memory. python 3 (config-applications-python:3) level commands clrscrn Clears the screen. exit Exits to the next higher level. filename <text> Sets the script path. no filename Clear the script path. no output Clear the script output path. no parameters Clear the script parameters. onshutdown disable Do not run the script on shutdown. onshutdown enable Run the script on shutdown. onstart disable Do not run the script on startup. onstart enable Run the script on startup. output <text> Sets the script output path. parameters <text> Sets the script parameters. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables script. state enable Enables script. write Stores the current configuration in permanent memory. python 4 (config-applications-python:4) level commands clrscrn Clears the screen. exit Exits to the next higher level. filename <text> Sets the script path. no filename Clear the script path. no output Clear the script output path. no parameters Clear the script parameters. onshutdown disable Do not run the script on shutdown. onshutdown enable Run the script on shutdown. onstart disable Do not run the script on startup. onstart enable Run the script on startup. output <text> Sets the script output path. parameters <text> Sets the script parameters. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables script. state enable Enables script.



write Stores the current configuration in permanent memory. qos (config-ethernet-qos:usb0) level commands clrscrn Clears the screen. default uplink data speed Restores the default uplink speed. exit Exit back to interface configuration level filter <instance> Enters the next lower level. Specify the instance for the

next lower level. import filters disable Do not import QoS filters from other interfaces. import filters enable Import QoS filters from other interfaces. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays the current status state disable Disables QoS. state enable Enables QoS. uplink data speed <floating point number> Sets the maximum uplink speed in kbps. write Stores the current configuration in permanent memory. qos (config-wlan-qos:wlan0) level commands clrscrn Clears the screen. default uplink data speed Restores the default uplink speed. exit Exit back to interface configuration level filter <instance> Enters the next lower level. Specify the instance for the


CLI session. show status Displays the current status state disable Disables QoS. state enable Enables QoS. uplink data speed <floating point number> Sets the maximum uplink speed in kbps. write Stores the current configuration in permanent memory. qos (config-ethernet-qos:eth0) level commands clrscrn Clears the screen. default uplink data speed Restores the default uplink speed. exit Exit back to interface configuration level filter <instance> Enters the next lower level. Specify the instance for the


CLI session. show status Displays the current status state disable Disables QoS.



state enable Enables QoS. uplink data speed <floating point number> Sets the maximum uplink speed in kbps. write Stores the current configuration in permanent memory. reboot schedule (device-reboot-schedule) level commands clrscrn Clears the screen. default hours Restores the default hour of day for reboot schedule time. default interval Restores the default schedule interval. default minutes Restores the default minutes on the hour for reboot

schedule. default schedule Restores the default reboot schedule type. default unit Restores the default reboot schedule interval unit. exit Returns to the previous level. hours <hours> Sets the hour of day for reboot schedule (Use 24h time). interval <number> Sets the reboot schedule interval minutes <minutes> Sets the minutes on the hour for reboot schedule. schedule daily Sets the reboot schedule type to 'daily'. schedule interval Sets the reboot schedule type to 'interval'. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables scheduled reboots. state enable Enables scheduled reboots. unit days Sets the reboot schedule interval to days. unit hours Sets the reboot schedule interval to hours. unit months Sets the reboot schedule interval to months. unit weeks Sets the reboot schedule interval to weeks. write Stores the current configuration in permanent memory. root level commands enable Enters the enable level. exit Exit from the system iperf <params> Run iperf with command line parameters passed in quot-

ed string. ping <host> Ping destination continuously with 5 second timeout ping <host> <count> Ping destination n times with 5 second timeout ping <host> <count> <timeout> Ping destination n times with x timeout (in seconds) ping6 <host> Ping destination continuously with 5 second timeout ping6 <host> <count> Ping destination n times with 5 second timeout ping6 <host> <count> <timeout> Ping destination n times with x timeout (in seconds) show Show system information show history Displays the last 20 commands entered during the current

CLI session. show lines Show line information show multicast routes show state of VIFs and multicast routing tables show routes show system routing table show rules show system rules tcpdump <parameters> dump traffic on a network



trace route <host> Trace route to destination trace route <host> <protocol> Trace route to destination using TCP, ICMP, or UDP rss (config-rss) level commands clear rss Clear the RSS Feed data clrscrn Clears the screen. default max entries Restores the default number of RSS feed entries. exit Exits to the configuration level. feed disable Disables RSS feed. feed enable Enables RSS feed. max entries <number> Sets the maximum number of RSS feed entries. persist disable Disables RSS feed data persistence. persist enable Enables RSS feed data persistence. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Display the RSS Feed status write Stores the current configuration in permanent memory. rss (modbus-rss) level commands clrscrn Clears the screen. exit Exits to the next higher level. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. trace input disable Disables RSS trace of Modbus PDUs received on the

serial line. trace input enable Enables RSS trace of Modbus PDUs received on the se-

rial line. write Stores the current configuration in permanent memory. security (config-profile-security:default_infra2) level commands advanced Switch to advanced level apply wlan Try out WLAN settings without saving them to Flash. If the


basic Switch to basic level clrscrn Clears the screen. default key type Restores the key type to the default value (passphrase). default suite Restores the security method (suite) to the default value

(None). exit Exit to the profiles level key type hex Sets the key type to hex. key type passphrase Sets the key type to passphrase. no passphrase Removes the passphrase. passphrase <text> Sets the passphrase. Maximum 63 characters. <text> =

put quotes around characters that make up the pass-phrase. Please refer to other equipment manuals to de-termine the recommended passphrase input style. NOTE: Lantronix recommends using a passphrase of 20 charac-ters or more for maximum security. Spaces and punctua-



tion characters are permitted. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. suite none Sets the security suite to None. suite wep Sets the security suite to WEP. suite wpa2-wpa mixed Sets the security suite to WPA2/WPA Mixed Mode. wep Enters the next lower level. wpax Enters the next lower level. write Stores the current configuration in permanent memory. serial (tunnel-serial:3) level commands clrscrn Clears the screen. default dtr Restores default DTR control, asserted while connected. dtr asserted while connected Asserts DTR whenever a connect or accept mode tunnel

connection is active. dtr continuously asserted Asserts DTR regardless of any connections. dtr truport Asserts DTR to match remote DSR when connected via

Telnet. dtr unasserted Does not assert DTR. exit Returns to the tunnel level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. serial (tunnel-serial:2) level commands clrscrn Clears the screen. default dtr Restores default DTR control, asserted while connected. dtr asserted while connected Asserts DTR whenever a connect or accept mode tunnel


Telnet. dtr unasserted Does not assert DTR. exit Returns to the tunnel level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. serial (tunnel-serial:1) level commands clrscrn Clears the screen. default dtr Restores default DTR control, asserted while connected. dtr asserted while connected Asserts DTR whenever a connect or accept mode tunnel


Telnet. dtr unasserted Does not assert DTR.



exit Returns to the tunnel level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. server (ssh-server) level commands authorized user <username> <password> Sets authorized username, password, and optionally RSA

and/or DSA public keys clrscrn Clears the screen. delete all authorized users Removes all authorized users delete authorized user <username> Remove an authorized user exit Exits to the ssh level. host generate dsa 1024 Generate DSA public and private keys host generate dsa 2048 Generate DSA public and private keys host generate dsa 4096 Generate DSA public and private keys host generate dsa 512 Generate DSA public and private keys host generate dsa 768 Generate DSA public and private keys host generate rsa 1024 Generate RSA public and private keys host generate rsa 2048 Generate RSA public and private keys host generate rsa 4096 Generate RSA public and private keys host generate rsa 512 Generate RSA public and private keys host generate rsa 768 Generate RSA public and private keys host keys Sets RSA or DSA public and/or private keys no host dsa Removes DSA public and private keys no host rsa Removes RSA public and private keys show Show SSH Server settings show authorized user <username> Show information for an authorized user show history Displays the last 20 commands entered during the current

CLI session. show host dsa Show full DSA public key show host rsa Show full RSA public key write Stores the current configuration in permanent memory. smtp (config-smtp) level commands clrscrn Clears the screen. default local port Clears the local port for SMTP client. default server port Restores the SMTP server port to its default. exit Exits to the configuration level. from address <text> Sets the From address for email alerts. <text> = email

address to place in the From field of the email alert. local port <number> Sets the local port for SMTP client. no from address Removes the From address for email alerts. no overriding domain Removes the overriding domain name option. no password Removes the password. no server address Removes the SMTP server address. no username Removes the username. overriding domain <text> Sets a domain name that will be used when connecting to



an SMTP server to send an email alert instead of the de-vice domain name in EHLO. <text> = domain name to override the current domain name in EHLO.

password <text> Sets the password for logging in to the mail server. server address <text> Sets an SMTP server address to direct all outbound email

messages through a mail server. server port <number> Sets the SMTP server port. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. username <text> Sets the username for logging in to the mail server. write Stores the current configuration in permanent memory. snmp (config-snmp) level commands clrscrn Clears the screen. exit Returns to the config level. no system location Clears the SNMP system location. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays the SNMP agent status. snmpd Enters the next lower level. system location <text> Sets the SNMP system location. <text> = location of de-

vice. traps Enters the next lower level. write Stores the current configuration in permanent memory. snmp trap (config-action-snmp_trap:wlan0 link state change) level commands alarm message <text> Sets the message to be sent when the alarm turns on. clrscrn Clears the screen. exit Exits to the next higher level. no alarm message Removes the alarm message. no normal message Removes the normal message. no reminder interval Clears the SNMP Trap reminder interval. SNMP Trap is

sent once only. normal message <text> Sets the message to be sent when the alarm turns off. reminder interval <minutes> Sets the SNMP Trap reminder interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Does not send SNMP Trap. state enable Sends SNMP Trap when alarm condition is met. write Stores the current configuration in permanent memory. snmp trap (config-action-snmp_trap:usb0 link state change) level commands alarm message <text> Sets the message to be sent when the alarm turns on. clrscrn Clears the screen. exit Exits to the next higher level. no alarm message Removes the alarm message. no normal message Removes the normal message.



no reminder interval Clears the SNMP Trap reminder interval. SNMP Trap is sent once only.

normal message <text> Sets the message to be sent when the alarm turns off. reminder interval <minutes> Sets the SNMP Trap reminder interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Does not send SNMP Trap. state enable Sends SNMP Trap when alarm condition is met. write Stores the current configuration in permanent memory. snmp trap (config-action-snmp_trap:on scheduled reboot) level commands alarm message <text> Sets the message to be sent when the alarm turns on. clrscrn Clears the screen. exit Exits to the next higher level. no alarm message Removes the alarm message. no normal message Removes the normal message. no reminder interval Clears the SNMP Trap reminder interval. SNMP Trap is


CLI session. state disable Does not send SNMP Trap. state enable Sends SNMP Trap when alarm condition is met. write Stores the current configuration in permanent memory. snmp trap (config-action-snmp_trap:eth0 link state change) level commands alarm message <text> Sets the message to be sent when the alarm turns on. clrscrn Clears the screen. exit Exits to the next higher level. no alarm message Removes the alarm message. no normal message Removes the normal message. no reminder interval Clears the SNMP Trap reminder interval. SNMP Trap is


CLI session. state disable Does not send SNMP Trap. state enable Sends SNMP Trap when alarm condition is met. write Stores the current configuration in permanent memory. snmpd (config-snmp-snmpd) level commands authentication password <text> Sets password used for authentication for agent. authentication protocol md5 Uses MD5 for authentication for agent. authentication protocol sha Uses SHA for authentication for agent.



clrscrn Clears the screen. default authentication protocol Restores to default SNMPv3 authentication method: MD5

for agent. default port Restores the SNMP agent port to default: 161. default privacy protocol Restores to default SNMPv3 privacy encryption method:

DES for agent. default read community Restores the SNMP read-only community to default: pub-

lic default security Restores to default SNMPv3 security method: Authentica-

tion, No Privacy for agent. default system description Restores the SNMP system description to its default. default system name Restores the SNMP system name to default: the product

name. default version Restores to default SNMP version v2c for agent. default write community Clears the SNMP read/write community to default: private exit Exits to the next higher level. no authentication password Clears authentication password for agent. no privacy password Clears privacy password for agent. no system contact Clears the SNMP system contact. no username Clears SNMPv3 username for agent. port <number> Sets the SNMP agent port. privacy password <text> Sets password used for privacy encryption for agent. privacy protocol aes Uses AES for privacy encryption for agent. privacy protocol des Uses DES for privacy encryption for agent. read community <text> Sets the SNMP read-only community string. <text> =

name of the read-only community string to be set. security authentication and privacy Authentication and Privacy for agent. security authentication but no privacy Authentication, No Privacy for agent. security no authentication and no priv No Authentication, No Privacy for agent. show Shows the current configuration. show engine id Displays the SNMP agent engine ID. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables the SNMP agent. state enable Enables the SNMP agent. system contact <text> Sets the SNMP system contact information. <text> = sys-

tem contact information. system description <text> Sets the SNMP system description. <text> = description of

device. system name <text> Sets the SNMP system name. <text> = SNMP system

name. username <text> Sets SNMPv3 username for agent. version snmpv1 Uses SNMPv1 for agent. version snmpv2c Uses SNMPv2c for agent. version snmpv3 Uses SNMPv3 for agent. write Stores the current configuration in permanent memory. write community <text> Sets the SNMP read-write community string. <text> =

name of the read-write community string to be set.



ssh (ssh) level commands client Enters the SSH Client configuration level. clrscrn Clears the screen. exit Exits to the enable level. server Enters the SSH Server configuration level. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. ssh (config-cli-ssh) level commands clrscrn Clears the screen. default max sessions Restores the default maximum allowed concurrent incom-

ing SSH sessions. default port Restores the default local port to the SSH server. exit Exits to the CLI level. max sessions <number> Sets the maximum allowed concurrent incoming SSH

sessions. <number> = number of sessions. port <number> Sets the local port that the SSH server uses. <number> =

local port number. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays the SSH server statistics. state disable Disables the SSH Server. state enable Enables the SSH Server. write Stores the current configuration in permanent memory. ssl (ssl) level commands clrscrn Clears the screen. credentials Enters the SSL credentials configuration level. delete csr Delete generated CSR (Certificate Signing Request). exit Exits to the enable level. generate csr Generate a new CSR (Certificate Signing Request). show history Displays the last 20 commands entered during the current

CLI session. trusted authorities Enters the SSL configuration level. view csr View generated CSR (Certificate Signing Request). write Stores the current configuration in permanent memory. static leases 1 (config-dhcpd-static_leases:1) level commands clrscrn Clears the screen. exit Exits to the config-dhcpd level. ip address <IP address> Sets the reserved IP address. ipv6 address <ipv6 address/prefix> Sets the reserved IPv6 address. IPv6 addresses are writ-




no ip address Clears the reserved IP address. no ipv6 address Clears the reserved IPv6 address. no mac address Removes the MAC Address. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. static leases <number> Change to dhcpd static lease level. write Stores the current configuration in permanent memory. static leases 2 (config-dhcpd-static_leases:2) level commands clrscrn Clears the screen. exit Exits to the config-dhcpd level. ip address <IP address> Sets the reserved IP address. ipv6 address <ipv6 address/prefix> Sets the reserved IPv6 address. IPv6 addresses are writ-






CLI session. static leases <number> Change to dhcpd static lease level. write Stores the current configuration in permanent memory. static leases 4 (config-dhcpd-static_leases:4) level commands



clrscrn Clears the screen. exit Exits to the config-dhcpd level. ip address <IP address> Sets the reserved IP address. ipv6 address <ipv6 address/prefix> Sets the reserved IPv6 address. IPv6 addresses are writ-

















CLI session. static leases <number> Change to dhcpd static lease level. write Stores the current configuration in permanent memory. static route 1 (config-staticroute:1) level commands



clrscrn Clears the screen. default metric Restores the metric to default value. exit Exits to the config-gateway level. friendly name <text> Set the friendly name for static route. <text> = friendly

name gateway <text> Sets the gateway for static route network. interface <text> Sets the route interface <text> = interface name metric <number> Sets the metric for static route. <number> = metric network <text> Sets the IP address and network mask for static route

network. no friendly name Remove the friendly name no gateway Clears the gateway for static route network. no interface Clears the route interface. The WAN interface is used if

no interface is specified. no network Clears the IP address for static route network. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables the static route. state enable Enables the static route. static route <number> Change to config gateway static route level. write Stores the current configuration in permanent memory. static route 2 (config-staticroute:2) level commands clrscrn Clears the screen. default metric Restores the metric to default value. exit Exits to the config-gateway level. friendly name <text> Set the friendly name for static route. <text> = friendly




CLI session. state disable Disables the static route. state enable Enables the static route. static route <number> Change to config gateway static route level. write Stores the current configuration in permanent memory. static route 3 (config-staticroute:3) level commands clrscrn Clears the screen.



default metric Restores the metric to default value. exit Exits to the config-gateway level. friendly name <text> Set the friendly name for static route. <text> = friendly








CLI session. state disable Disables the static route. state enable Enables the static route. static route <number> Change to config gateway static route level. write Stores the current configuration in permanent memory. static route 5 (config-staticroute:5) level commands clrscrn Clears the screen. default metric Restores the metric to default value.



exit Exits to the config-gateway level. friendly name <text> Set the friendly name for static route. <text> = friendly








CLI session. state disable Disables the static route. state enable Enables the static route. static route <number> Change to config gateway static route level. write Stores the current configuration in permanent memory. static route 7 (config-staticroute:7) level commands clrscrn Clears the screen. default metric Restores the metric to default value. exit Exits to the config-gateway level.



friendly name <text> Set the friendly name for static route. <text> = friendly name

gateway <text> Sets the gateway for static route network. interface <text> Sets the route interface <text> = interface name metric <number> Sets the metric for static route. <number> = metric network <text> Sets the IP address and network mask for static route







CLI session. state disable Disables the static route. state enable Enables the static route. static route <number> Change to config gateway static route level. write Stores the current configuration in permanent memory. syslog (config-syslog) level commands clrscrn Clears the screen. default local port Clears the syslog local port. default remote port Restores the default syslog remote port. default severity log level Restores the default to no logging.



exit Returns to the config level. host <text> Sets the address of the syslog recipient. <text> = IP ad-

dress or name of the host. local port <number> Sets the syslog local port. no host Removes the address of the syslog recipient. remote port <number> Sets the syslog remote port. <number> = number of the

remote port used when making a syslog connection. severity log level alert Log only Alert and more severe events. severity log level critical Log only Critical and more severe events. severity log level debug Log all events. severity log level emergency Log only Emergency events. severity log level error Log only Error and more severe events. severity log level information Log only Information and more severe events. severity log level none No logging. severity log level notice Log only Notice and more severe events. severity log level warning Log only Warning and more severe events. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays the syslog statistics. state disable Disables syslog logging. state enable Enables syslog logging. write Stores the current configuration in permanent memory. telnet (config-cli-telnet) level commands authentication disable No password required for Telnet users. authentication enable Challenges the Telnet user with a password. clrscrn Clears the screen. default max sessions Restores the default maximum allowed concurrent incom-

ing Telnet sessions. default port Restores the default local port to the Telnet server. exit Exits to the CLI level. max sessions <number> Sets the maximum allowed concurrent incoming Telnet

sessions. <number> = number of sessions. port <number> Sets the local port that the Telnet server uses. <number>

= local port number. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show statistics Displays the Telnet statistics. state disable Disables the Telnet Server. state enable Enables the Telnet Server. write Stores the current configuration in permanent memory. terminal 1 (config-terminal:1) level commands break duration <milliseconds> Sets how long a break should last when it is being sent to

the line. <milliseconds> = number of milliseconds. clrscrn Clears the screen. default break duration Restores the break duration to the default value (500 ms).



default terminal type Sets the default terminal type, 'UNKNOWN'. echo disable Disables echoing of characters received on the line back

to the line. echo enable Enables echoing of characters received on the line back

to the line. exit Exits to the configuration level. exit connect menu disable On the login connect menu, removes the menu item al-

lowing the user to exit to the CLI. exit connect menu enable On the login connect menu, inserts the menu item allow-

ing the user to exit to the CLI. line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. login connect menu disable Disables the login connect menu, so a user will get the

CLI immediately after logging in. login connect menu enable Enables the login connect menu, so a user will get the

menu rather than the CLI immediately after logging in. no send break Removes the configured send break character. preview connect menu Shows the layout of the connect menu with current set-

tings. send break <control> Sets the optional send break character. <text> = the char-

acter. The character may be input as text, control, deci-mal, or hex. A control character has the form <control>C. A decimal value character has the form \99. A hex value character has the form 0xFF.


CLI session. terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. terminal type <text> Sets the terminal type. tunnel <line> Enters the tunnel level. <line> = number of the tunnel line


to be configured. write Stores the current configuration in permanent memory. terminal 2 (config-terminal:2) level commands break duration <milliseconds> Sets how long a break should last when it is being sent to

the line. <milliseconds> = number of milliseconds. clrscrn Clears the screen. default break duration Restores the break duration to the default value (500 ms). default terminal type Sets the default terminal type, 'UNKNOWN'. echo disable Disables echoing of characters received on the line back
















to be configured. write Stores the current configuration in permanent memory. terminal 3 (config-terminal:3) level commands break duration <milliseconds> Sets how long a break should last when it is being sent to

















to be configured. write Stores the current configuration in permanent memory. terminal network (config-terminal:network) level commands break duration <milliseconds> Sets how long a break should last when it is being sent to

















to be configured. write Stores the current configuration in permanent memory. traps (config-snmp-traps) level commands authentication password <text> Sets password used for authentication for traps. authentication protocol md5 Uses MD5 for authentication for traps. authentication protocol sha Uses SHA for authentication for traps. clrscrn Clears the screen. community <text> Sets the SNMP trap community string. <text> = name of

the trap community string to be set. default authentication protocol Restores to default SNMPv3 authentication method: MD5

for traps. default community Restores the SNMP trap community to default: public default primary destination port Restores the primary SNMP trap host port to default: 162. default privacy protocol Restores to default SNMPv3 privacy encryption method:

DES for traps. default secondary destination port Restores the secondary SNMP trap host port to default:

162. default security Restores to default SNMPv3 security method: Authentica-

tion, No Privacy for traps. default version Restores to default SNMP version v2c for traps. exit Exits to the next higher level. no authentication password Clears authentication password for traps. no primary destination Deletes the primary SNMP trap host. no privacy password Clears privacy password for traps. no secondary destination Deletes the secondary SNMP trap host. no username Clears SNMPv3 username for traps. primary destination <text> Sets the primary SNMP trap host. <text> = IP address or

hostname of SNMP trap receiver. primary destination port <number> Sets the primary SNMP trap host port. privacy password <text> Sets password used for privacy encryption for traps. privacy protocol aes Uses AES for privacy encryption for traps. privacy protocol des Uses DES for privacy encryption for traps. secondary destination <text> Sets the secondary SNMP trap host. <text> = IP address

or hostname of SNMP trap receiver. secondary destination port <number> Sets the secondary SNMP trap host port. security authentication and privacy Authentication and Privacy for traps. security authentication but no privacy Authentication, No Privacy for traps. security no authentication and no priv No Authentication, No Privacy for traps. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session.



username <text> Sets SNMPv3 username for traps. version snmpv1 Uses SNMPv1 for traps. version snmpv2c Uses SNMPv2c for traps. version snmpv3 Uses SNMPv3 for traps. write Stores the current configuration in permanent memory. trusted authorities (ssl-auth) level commands add Adds an Authority Certificate. clrscrn Clears the screen. exit Exits to the ssl level. no intermediate authority <cert> Removes an Intermediate Authority Certificate. <cert> =

index displayed by "show authority" command. no trusted authority <cert> Removes a Trusted Authority Certificate. <cert> = index

displayed by "show authority" command. show Displays Authority Certificate Information. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. tunnel 1 (tunnel:1) level commands accept Enters the accept level for this tunnel. auto show statistics show connection statistics clear counters Zeros all tunnel counters clrscrn Clears the screen. connect Enters the connect level for this tunnel. disconnect Enters the disconnect level for this tunnel. exit Exits to the enable level. line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. modem Enters the modem level for this tunnel. no clear counters Unzeros all tunnel counters packing Enters the packing level for this tunnel. serial Enters the serial level for this tunnel. show history Displays the last 20 commands entered during the current

CLI session. show statistics show connection statistics terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. tunnel <line> Enters the tunnel level. <line> = number of the tunnel line


to be configured. write Stores the current configuration in permanent memory. tunnel 2 (tunnel:2) level commands accept Enters the accept level for this tunnel. auto show statistics show connection statistics clear counters Zeros all tunnel counters clrscrn Clears the screen.



connect Enters the connect level for this tunnel. disconnect Enters the disconnect level for this tunnel. exit Exits to the enable level. line <line> Enters the line level. <line> = number of the line (serial





to be configured. write Stores the current configuration in permanent memory. tunnel 3 (tunnel:3) level commands accept Enters the accept level for this tunnel. auto show statistics show connection statistics clear counters Zeros all tunnel counters clrscrn Clears the screen. connect Enters the connect level for this tunnel. disconnect Enters the disconnect level for this tunnel. exit Exits to the enable level. line <line> Enters the line level. <line> = number of the line (serial





to be configured. write Stores the current configuration in permanent memory. unreachable host detection (config-vpn-unreachable_host_detection:1) level commands clrscrn Clears the screen.



default max tries Restores the default connecion error threshold. default ping interval Restores the default ping interval. exit Exits to the next higher level. host <text> Sets the host name. <text> = host name to Ping. max tries <number> Sets the connection error threshold. If <pings> attempts

go unanswered, the device will restart the VPN connec-tion.

no host Clears the host name. ping interval <minutes> Sets the ping interval. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. usb 1 (usb-line:1) level commands auto show statistics Continuously displays line statistics. clear line counters Sets the serial counters to zero. clrscrn Clears the screen. command mode always Sets the current line to always be in command mode. command mode echo serial string disable Disables user-defined serial boot string to be echoed in







default line mode Restores the default usb line mode. default threshold Restores the factory default threshold. exit Exits to the enable level gap timer <milliseconds> Sets the gap timer in milliseconds. If some data has been


interface usb-cdc-acm Sets the usb line interface to USB-CDC-ACM. kill session Kills command mode session on the Line line <line> Enters the line level. <line> = number of the line (serial

port) to be configured. line mode ethernet device Sets the usb line to ethernet device mode. line mode host Sets the usb line to host mode. line mode serial device Sets the usb line to serial device mode. name <text> Sets the name for this usb line.



no clear line counters Restores the serial counters to the aggregate values. no command mode Disables command mode for the current line. no command mode signon message Clears the signon message displayed at boot time and


usb line speed. no name Removes the name of this usb line. protocol none Uses no protocol on the usb line. protocol tunnel Applies Modbus RTU protocol on the usb line. show Displays the current status. show command mode Shows the command mode settings for the current line. show history Displays the last 20 commands entered during the current

CLI session. show statistics Shows the line statistics. show usb line Displays the current configuration. state disable Disables the usb line so data cannot be sent/received. state enable Enables the usb line so data can be sent/received. terminal <line> Enters the configure-terminal level. <line> = number of the

terminal line (serial port) to be configured. terminal network Enters the configure-terminal level for the network. threshold <bytes> Sets the threshold in bytes. After this many bytes are re-



to be configured. write Stores the current configuration in permanent memory. usb0 link state change (config-action:usb0 link state change) level commands clrscrn Clears the screen. default delay Resets alarm processing delay to its default value. delay <seconds> Sets the delay in processing the alarm. Alarm actions will

not be executed if the cause is corrected within this time. email Enters the next lower level. exit Exits to the config alarm level. ftp put Enters the next lower level. http post Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays statistics. snmp trap Enters the next lower level. write Stores the current configuration in permanent memory. user management (config-user-management) level commands admin password <text> Sets the CLI login password. Password must be 4 to 15

characters and contain combination of the following char-acters: uppercase letters, lowercase letters, numbers, symbols (punctuation marks). Put double quotes around the password.



admin username <text> Sets the CLI login username. clrscrn Clears the screen. create role <role name> Create a new role <role name> = role name. create user <user name> <password> <role name> Create a new user <user name> = user name. <pass-

word> = user password. Password must be 4 to 15 char-acters and contain combination of the following charac-ters: uppercase letters, lowercase letters, numbers, sym-bols (punctuation marks). Put double quotes around the password. <role name> = user role name.

default admin password Restores the default CLI login password. default admin username Restores the default CLI login username. delete role <role name or instance> Delete existing role <role name or instance> = role name

or instance. delete user <user name or instance> Delete existing user <user name or instance> = user

name or instance. edit role <role name or instance> Change to config-user-management-roles level. edit user <user name or instance> Change to config-user-management-users level. exit Returns to the config level. show Displays the current configuration. show actions List Actions to the console show configuration groups List Configuration Record group names to the console show history Displays the last 20 commands entered during the current

CLI session. show roles Show existing roles show users Show existing users write Stores the current configuration in permanent memory. virtual ip 1 (config-virtual-interface:1) level commands clrscrn Clears the screen. exit Exits to the config-gateway level. ip address <text> Sets the Virtual IP address. lan ip address <text> Sets the LAN IP address. name <text> Sets the name. <text> = name. no ip address Clears the Virtual IP address. no lan ip address Clears the LAN IP address. no name Clears the name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables Virtual IP instance. state enable Enables Virtual IP instance. write Stores the current configuration in permanent memory. virtual ip 2 (config-virtual-interface:2) level commands clrscrn Clears the screen. exit Exits to the config-gateway level. ip address <text> Sets the Virtual IP address. lan ip address <text> Sets the LAN IP address. name <text> Sets the name. <text> = name.



no ip address Clears the Virtual IP address. no lan ip address Clears the LAN IP address. no name Clears the name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables Virtual IP instance. state enable Enables Virtual IP instance. write Stores the current configuration in permanent memory. virtual ip 3 (config-virtual-interface:3) level commands clrscrn Clears the screen. exit Exits to the config-gateway level. ip address <text> Sets the Virtual IP address. lan ip address <text> Sets the LAN IP address. name <text> Sets the name. <text> = name. no ip address Clears the Virtual IP address. no lan ip address Clears the LAN IP address. no name Clears the name. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. state disable Disables Virtual IP instance. state enable Enables Virtual IP instance. write Stores the current configuration in permanent memory. vpn 1 (config-vpn:1) level commands aggressive mode disable Disables aggressive mode. aggressive mode enable Enables aggressive mode. authentication mode psk Sets the authentication mode to PSK. authentication mode rsa Sets the authentication mode to RSA. authentication mode xauth Sets the authentication mode to XAUTH. clrscrn Clears the screen. connection name <text> Sets the name. <text> = name. connection type host to host Sets the connection type to Host to Host. connection type host to subnet Sets the connection type to Host to Subnet. create new local rsa key Create new Local RSA key default authentication mode Restores the default authentication mode. default connection type Restores the default connection type. default esp authentication Restores the default ESP authentication. default esp dh group Restores the default ESP DH Group. default esp encryption Restores the default ESP encryption. default ike authentication Restores the default IKE authentication. default ike dh group Restores the default IKE DH Group. default ike encryption Restores the default IKE encryption. default ike life time Restores the default IKE lifetime. default ikev2 Restores the default IKEv2 setting (Permit).



default interface Restores the default interface. default local key length Restores the default local RSA key length. default remote peer type Restores the default remote peer type. default sa life time Restores the default SA lifetime. default type Restores the default transport type. esp authentication any Sets ESP authentication to any. esp authentication md5 Sets ESP authentication to MD5. esp authentication sha1 Sets ESP authentication to SHA1. esp authentication sha2 Sets ESP authentication to SHA2. esp dh group any Sets ESP DH Group to any. esp dh group dh1 Sets ESP DH Group to DH1. esp dh group dh14 Sets ESP DH Group to DH14. esp dh group dh2 Sets ESP DH Group to DH2. esp dh group dh5 Sets ESP DH Group to DH5. esp encryption 3des Sets ESP encryption to 3DES. esp encryption aes128 Sets ESP encryption to AES-128. esp encryption aes256 Sets ESP encryption to AES-256. esp encryption any Sets ESP encryption to any. esp encryption des Sets ESP encryption to DES. exit Exits to the config level. ike authentication any Sets IKE authentication to any. ike authentication md5 Sets IKE authentication to MD5. ike authentication sha1 Sets IKE authentication to SHA1. ike authentication sha2 Sets IKE authentication to SHA2. ike dh group any Sets IKE DH Group to any. ike dh group dh1 Sets IKE DH Group to DH1. ike dh group dh14 Sets IKE DH Group to DH14. ike dh group dh2 Sets IKE DH Group to DH2. ike dh group dh5 Sets IKE DH Group to DH5. ike encryption 3des Sets IKE encryption to 3DES. ike encryption aes128 Sets IKE encryption to AES-128. ike encryption aes256 Sets IKE encryption to AES-256. ike encryption any Sets IKE encryption to any. ike encryption des Sets IKE encryption to DES. ike life time <hours> Sets the IKE lifetime. ikev2 insist Sets the IKEv2 setting to Insist, signifying that the device

will only accept and receive IKEv2 and IKEv1 negotiations will be rejected.

ikev2 never Sets the IKEv2 setting to Never, signifying no IKEv2 nego-tiation should be transmitted or accepted.

ikev2 permit Sets the IKEv2 setting to Permit, signifying no IKEv2 should be transmitted, but will be accepted if the other ends initiates to us with IKEv2.

ikev2 propose Sets the IKEv2 setting to Propose, signifying that the de-vice will permit IKEv2, and also use it as the default to initiate.

interface <text> Sets the interface. <text> = interface.



local id <text> Sets the local id. <text> = local id. local key length <bits> Sets the local RSA key length. local next hop <text> Sets the local next hop. <text> = local next hop. local subnet <text> Sets the local subnet. <text> = local subnet. mode configuration disable Disables mode configuration. mode configuration enable Enables mode configuration. nat traversal disable Disables NAT traversal. nat traversal enable Enables NAT traversal. no connection name Clears the name. no local id Clears the local id. no local next hop Clears the local next hop. no local subnet Clears the local subnet. no password Clears the password. no psk Clears the pre shared key. no remote endpoint Clears the remote end point. no remote id Clears the remote id. no remote key Clears the remote key. no remote next hop Clears the remote next hop. no remote rsa key Clears the remote RSA key. no remote subnet Clears the remote subnets. no username Clears the username. password <text> Sets the password. <text> = password. perfect forward secrecy disable Disables perfect forward secrecy (PFS). perfect forward secrecy enable Enables perfect forward secrecy (PFS). psk <text> Sets the pre shared key (PSK). <text> = pre shared key. remote endpoint <text> Sets the remote end point. <text> = remote end point. remote id <text> Sets the remote id. <text> = remote id. remote key <text> Sets the remote key. <text> = remote key. remote next hop <text> Sets the remote next hop. <text> = remote next hop. remote peer type cisco Sets the remote peer type to cisco. remote peer type ietf Sets the remote peer type to ietf. remote rsa key <text> Sets the remote RSA key. <text> = remote RSA key. remote subnet <text> Sets the remote subnets. <text> = remote subnets. sa life time <hours> Sets the SA lifetime. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show local rsa key Show Local RSA key show logs Show logs show status Show VPN status state disable Disables VPN tunnel. state enable Enables VPN tunnel. type transport Sets the transport type to transport. type tunnel Sets the transport type to tunnel. unreachable host detection Enters the next lower level.



username <text> Sets the username. <text> = username. vpn <instance> Change to vpn level. write Stores the current configuration in permanent memory. wep (config-profile-security-wep:default_infra2) level commands apply wlan Try out WLAN settings without saving them to Flash. If the


authentication open Sets the type of authentication to open. authentication shared Sets the type of authentication to shared. clrscrn Clears the screen. default authentication Restores the authentication type to the default value

(open). default key size Restores the key size to the default value (40 bits). default tx key index Restores the tx key index to the default value (1). exit Exits to the next higher level. key <instance> Enters the next lower level. Specify the instance for the

next lower level. key size 104 Sets the key size to 104 bits. key size 40 Sets the key size to 40 bits. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. tx key index 1 Selects key 1 for transmission encryption. tx key index 2 Selects key 2 for transmission encryption. tx key index 3 Selects key 3 for transmission encryption. tx key index 4 Selects key 4 for transmission encryption. write Stores the current configuration in permanent memory. wlan profiles (config-profiles) level commands apply wlan Try out WLAN settings without saving them to Flash. If the


clrscrn Clears the screen. create <profile name> Create a new profile name delete <profile name> Delete existing profile by name edit <profile name> View or edit an existing profile exit Exits to the config level. show Show existing profile names show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. wlan0 link state change (config-action:wlan0 link state change) level commands clrscrn Clears the screen. default delay Resets alarm processing delay to its default value. delay <seconds> Sets the delay in processing the alarm. Alarm actions will

not be executed if the cause is corrected within this time. email Enters the next lower level. exit Exits to the config alarm level.



ftp put Enters the next lower level. http post Enters the next lower level. show Displays the current configuration. show history Displays the last 20 commands entered during the current

CLI session. show status Displays statistics. snmp trap Enters the next lower level. write Stores the current configuration in permanent memory. wpax (config-profile-security-wpax:default_infra2) level commands apply wlan Try out WLAN settings without saving them to Flash. If the


authentication 802.1x Sets the authentication method to IEEE 802.1x. authentication psk Sets the authentication method to PSK. clrscrn Clears the screen. credentials <text> Selects the RSA certificate by configured name. default authentication Restores the authentication method to the default value

(PSK). default eap-ttls option Restores the eap-ttls protocol options to the default (EAP-

MSCHAP V2). default fast option Restores the FAST authentication protocol option to the

default (MD5). default fast provisioning Restores the FAST provisioning to the default (Authenti-

cated). default ieee 802.1x Restores the default IEEE 802.1x protocol, EAP-TTLS. default peap option Restores the PEAP authentication protocol options to the

default (EAP-MSCHAP V2). default pmf Restores PMF to the default value (Disabled). eap-ttls option chap Sets the EAP-TTLS authentication protocol option to

CHAP. eap-ttls option eap-md5 Sets the EAP-TTLS authentication protocol option to EAP-

MD5. eap-ttls option eap-mschapv2 Sets the EAP-TTLS authentication protocol option to EAP-

MSCHAP V2. eap-ttls option mschap Sets the EAP-TTLS authentication protocol option to

MSCHAP. eap-ttls option mschapv2 Sets the EAP-TTLS authentication protocol option to

MSCHAP V2. eap-ttls option pap Sets the EAP-TTLS authentication protocol option to PAP. exit Exits to the next higher level. fast option gtc Sets the FAST authentication protocol option to GTC. fast option md5 Sets the FAST authentication protocol option to MD5. fast option mschapv2 Sets the FAST authentication protocol option to

MSCHAPv2. fast provisioning authenticated Sets the FAST provisioning option to Authenticated. fast provisioning both Sets the FAST provisioning option to Both. fast provisioning unauthenticated Sets the FAST provisioning option to Unauthenticated. ieee 802.1x eap-tls Sets the IEEE 802.1x protocol to EAP-TLS.



ieee 802.1x eap-ttls Sets the IEEE 802.1x protocol to EAP-TTLS. ieee 802.1x fast Sets the IEEE 802.1x protocol to FAST. ieee 802.1x leap Sets the IEEE 802.1x protocol to LEAP. ieee 802.1x peap Sets the IEEE 802.1x protocol to PEAP. inner credentials <text> Selects the RSA certificate by configured name. key <hexadecimal> Sets WPAx key. Each byte is represented by two adjacent


key text <text> Sets WPAx key. Each byte is represented by a single character. Note that quotes must enclose the value if it contains spaces.

no credentials Clears the RSA certificate name. no inner credentials Clears the RSA certificate name. no key Removes WPAx key. no password Clears the password. no username Clears the user name. password <text> Sets the value for the password. <text> = put quotes

around the characters (max 63). peap option eap-md5 Sets the PEAP authentication protocol option to EAP-

MD5. peap option eap-mschapv2 Sets the PEAP authentication protocol option to EAP-

MSCHAP V2. peap option eap-tls Sets the PEAP authentication protocol option to EAP-TLS. pmf disabled Disables PMF. pmf optional Makes PMF optional. pmf required Makes PMF required. show Shows the current configuration. show history Displays the last 20 commands entered during the current

CLI session. username <text> Sets the value of the username. <text> = value in charac-

ters (max 63). validate certificate disable Server certificate will not be verified. validate certificate enable Server certificate will be verified. write Stores the current configuration in permanent memory. xml (xml) level commands clrscrn Clears the screen. exit Exits to the enable level. show history Displays the last 20 commands entered during the current

CLI session. write Stores the current configuration in permanent memory. xcr dump Dump XML configuration to the console xcr dump <group list> Dump specified XML configuration to the console xcr export <file> Save XML configuration to a file xcr export <file> <group list> Save specified XML configuration to a local file xcr import <file> Load XML configuration from a local file xcr import <file> <group list> Load specified XML configuration from a local file



xcr list List XML Configuration Record groups to the console xsr dump Dump XML Status Records to the console xsr dump <group list> Dump specified XML Status Records to the console xsr export <file> Save XML Status Record to a file xsr export <file> <group list> Save specified XML Status Record to a local file xsr list List XML Status Record groups to the console

sgx 5150 iot device gateway command reference - … · sgx 5150 iot device gateway command...

Documents